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Chapter 1 



Introduction 



The theory of Quantum Information emerges as an effort to generahze classical 
information theory into the quantum realm, by using the laws of quantum physics 
to encode, process and extract information. It was Rolf Landauer, known among 
other things for his remarkable contributions to the theory of electrical conductivity, 
who at the end of 1960 coined the idea that information rather than an abstract 
mathematical concept, is at the very end a physical process governed by physical 
laws. At the same time, Richard Feynman in "Simulating Physics with Computers" 
realized that in order to simulate intrinsically quantum physical processes, a classical 
computer will necessarily fail by its mere deterministic continuous nature while he 
showed how a quantum one would succeed efficiently in simulating and computing. 
At the end of the 80s, David Deutsch in his seminal paper "Quantum theory, the 
Church- Turing principle and the universal quantum computer" set the ground for the 
theory of quantum information. He considered a universal classical Turing machine, 
which is the prototype of any classical computer, and propose the first universal 
quantum Turing machine paving the way towards quantum circuit modeling. 

An algorithm is nothing else than a set of rules to solve efficiently a given prob- 
lem in a finite number of steps. Problems are usually classified in different com- 
plexity classes. An important class of problems are the so-called, non-deterministic 
polynomial (NP) problems, whose efficient solution using classical computers grows 
exponentially with the input size of the problem. The cornerstone example of a NP 
problem is factorization. A big leap in the theory of Quantum Information was done 
by Peter Shor when he proposed in 1994 a quantum algorithm to factorize a prime 
number in an efficient way. Precisely the lack of an efficient classical solution to this 
problem sustains present cryptographic methods. The importance of his discovery, 
had led to a revolution on the emergent field of quantum information, involving 
for the first time non-academic interests as Quantum Cryptography with already 
successful implementations. Simultaneously, in 1995 Ignacio Cirac and Peter Zoller 
proposed the first realizable model of a quantum computer, using an array of trapped 
ions, an available technology since the beginning of the 1990. 

Since the end of the 1990, until now, very different models, involving solid states 
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devices, quantum dots, quantum optics, ... have emerged as possible candidates to 
process information in a reliable and powerful way. At the same time, novel prob- 
lems and solutions have arise by exploiting the properties of quantum laws in many 
different scenarios. Without the impressive experimental advance in manipulation 
of quantum systems, either using ultra-cold atoms, photons or ions. Quantum Infor- 
mation would have not reach the enormous current interest. 

This thesis deals with the study of quantum communication protocols with Con- 
tinuous Variable (CV) systems. Continuous Variable systems are those described by 
canonical conjugated coordinates x and p endowed with infinite dimensional Hilbert 
spaces, thus involving a complex mathematical structure. A special class of CV 
states, are the so-called Gaussian states. With them, it has been possible to im- 
plement certain quantum tasks as quantum teleportation, quantum cryptography 
and quantum computation with fantastic experimental success. The importance of 
Gaussian states is two-fold; firstly, its structural mathematical description makes 
them much more amenable than any other CV system. Secondly, its production, 
manipulation and detection with current optical technology can be done with a very 
high degree of accuracy and control. Nevertheless, it is known that in spite of their 
exceptional role within the space of all Continuous Variable states, in fact, Gaussian 
states are not always the best candidates to perform quantum information tasks. 
Thus non- Gaussian states emerge as potentially good candidates for communication 
and computation purposes. This dissertation is organized as follows. 

In chapter [2j we review the formalism of Continuous Variable systems focussing 
on Gaussian states. We show that Gaussian states admit an easy mathematical de- 
scription based on phase-space Wigner functions as well as with covariance matrices. 
We introduce also the basic ingredients to describe multipartite systems with entan- 
glement together with the most relevant well known results and finally we detail the 
description of light as a CV system. 

In chapter [3j we present a protocol that permits to extract quantum keys from an 
entangled Continuous Variable system. Differently from discrete systems, Gaussian 
entangled states cannot be distilled with Gaussian operations only i.e. entangled 
Gaussian states are always bound entangled. However it was already shown, that it 
is still possible to extract perfectly correlated classical bits to establish secret random 
keys using an "entanglement based" approach. Differently from previous attempts 
where the realistic implementation was not considered, we properly modify the pro- 
tocol using bipartite Gaussian entanglement to perform quantum key distribution 
in an efficient and realistic way. We describe and demonstrate security in front of 
different possible attacks on the communication, detailing the resources demanded 
while quantifying and relating the efficiency of the protocol with the entanglement 
shared between the parties involved. Our results are reported in |lj. 

In chapter [4j we move to multipartite Gaussian states. There, we consider a 
simple 3-partite protocol known as Byzantine Agreement (detectable broadcast). 
The Byzantine Agreement is an old classical communication problem in which parties 
(with possible traitors among them) can only communicate pairwise, while trying 



to reach a common decision. Classically, there is a bound in the number of possible 
traitors that can be involved in the game if only classical secure channels are used. 
In the simplest case where three parties are involved, one of them being a traitor, 
no classical solution exists. Nevertheless, a quantum solution exist, i.e. letting a 
traitor being involved and using as a fundamental resource multipartite entanglement 
it is permitted to reach a common agreement. We demonstrate that detectable 
broadcast is also solvable within Continuous Variable using multipartite entangled 
Gaussian states and Gaussian operations (homodyne detection). Furthermore, we 
show under which premises concerning entanglement content of the state, noise, 
inefficient homodyne detectors, our protocol is efficient and applicable with present 
technology. Our results are reported in [2\. 

In chapter ^ we move to the problem of quantification of correlations (quantum 
and/or classical) between two Continuous Variable modes. We propose to define 
correlations between the two modes as the maximal number of correlated bits ex- 
tracted via local quadrature measurements on each mode. On Gaussian states, where 
entanglement is accessible via their covariance matrix our quantification majorizes 
entanglement, reducing to an entanglement monotone for pure states. For mixed 
Gaussian states we provide an operational receipt to quantify explicitly the classical 
correlations presents in the states. We then address non-Gaussian states with our 
operational quantification that is based on and up to second moments only in con- 
trast to the exact detection of entanglement that generally involves measurements of 
high-order moments. For non-Gaussian states, such as photonic Bell states, photon 
subtracted states and mixtures of Gaussian states, the bit quadrature correlations 
are shown to be also a monotonic function of the negativity. This quantification 
yields a feasible, operational way to measure non-Gaussian entanglement in current 
experiments by means of direct homodyne detection, without needing a complete 
state tomography. Our analysis demonstrates the rather surprising feature that en- 
tanglement in the considered non-Guassian examples can thus be detected and ex- 
perimentally quantified with the same complexity as if dealing with Gaussian states. 
Our results are reported in p]. 

In chapter [gJ we focus to atomic ensembles described as CV systems. Entangle- 
ment between distant mesoscopic atomic ensembles can be induced by measuring an 
ancillary light system. We show how to generate, manipulate and detect mesoscopic 
entanglement between an arbitrary number of atomic samples through a quantum 
non-demolition matter-light interface. Measurement induced entanglement between 
two macroscopical atomic samples was reported experimentally in 2001. There, the 
interaction between a single laser pulse propagating through two spatially separated 
atomic samples combined with a final projective measurement on the light led to the 
creation of pure EPR entanglement between the two samples. Due to the quantum 
non-demolition character of the measurement, verification of the EPR state was done 
by passing a second pulse and measuring variances on light. Our proposal extends 
this idea in a non-trivial way for multipartite entanglement (GHZ and cluster-like) 
without needing local magnetic fields. We propose a novel experimental realization 
of measurement induced entanglement. Moreover, we show quite surprisingly that 
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given the irreversible character of a measurement, the interaction of the atomic sam- 
ple with a second pulse light can modify and even reverse the entangling action of 
the first one leaving the samples in a separable state. Our results are reported in [1] 
and [5j. 

Finally, in chapter [7j we conclude summarizing our results, listing some open 
questions and giving future directions of research. 



Chapter 2 

Continuous Variable formalism 



Continuous Variable (CV) systems are those systems described by two canonical 
conjugated degrees of freedom i.e. there exist two observables that fulfill Canonical 
Commutation Relations (CCR). This chapter comprises a detailed description of 
Continuous Variable systems. It provides also the mathematical framework needed 
to analyze the problems treated within this thesis. After introducing a phase-space 
formalism and the corresponding quasi-probability distributions I shall restrict first 
to Gaussian states which describe, among others, coherent, squeezed and thermal 
states. As a cornerstone example, I will shortly develop the canonical quantization of 
light, ending by showing how to deal with Gaussian states of light. Presently, these 
states are the preferred resources in experiments of QI using Continuous Variable 
systems. For further background information the interested reader is referred to 

[SlITiEiigiioiiiiiiii]. 

2.1 Continuous Variable systems 

The Canonical Commutation Relations for two canonical observables q and p read[^ 

[q,p\ =il. (2.1) 

So a direct consequence to the fact that two hermitian operators q and p fulfill the 
CCR is that 

(i) the underlying Hilbert space cannot be finite dimensional. This can be seen 



by applying the trace into Eq. (2.1). Using finite dimensional operator algebra one 



would obtain, on one hand, idim?^, while on the other tr(gj5) — ti{pq) = 0. 



(ii) q and p cannot be bounded, since t 



df{A) - - ^ 



from [fiA),B] = ^ij^[A, B]) implies thatP 

which means that ||g|| • ||j5|| > ^rn has to be true for all m. 



le relation [q'^,p] = mq^ i (obtained 

q\r-\\p\\>\\\[GrM = \M\q\r-\ 



^Quadrature operators are chosen adimensional in such a way that h is not going to appear in 
any formula. 

^Using ||i|| ■ ||B|| > IliBII = \\\[A,B] + {A,i3}\\ > |||[i,B]||. 
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This is a direct consequence of the fact that q and p possess a continuous spectra 
and act in an infinite dimensional Hilbert space. 

Examples of CV systems we can think of are the position-momentum of a mas- 
sive particle, the quadratures of an electromagnetic field, the collective spin of a 
polarized ensemble of atoms [13J or the radial modes of trapped ions [14j . In all of 



the examples above, there exist two observables fulfilling (2.1). As we will show, 
these observables obey the standard bosonic commutation relations and so we call 
these systems bosonic modes. We can deal with several modes, and in this case, by 
ordering the operators in canonical pairs through R^ = {qi,pi,q2,P2, ■ ■ ■ ■, Qn,Pn) we 
can compactly state CCR as 

[Ri.,Rj] = iI{JNh (2.2) 

where i,j = 1,2,..., 2N and J'n = ®^=iJ accounts for all modes. J is the so-called 
symplectic matrix which corresponds to an antisymmetric and non-degenerate form 
fulfilling (i) Vr/,C G M^^ : {r]\J\Q) = -{C\J\ri) and (ii) Vr? : {t]\J\C) = ^ C = 0. 
In the appropriate choice of basis (canonical coordinates) the symplectic matrix is 
brought to the standard form 

.7.(_», J). M 

2.2 Canonical Commutation Relations 

Canonical Commutation Relation^ can also be expressed using annihilation and 
creation operators a^ and ajj which obey standard bosonic commutation relations 

[a^, al] = 5^y, [a^, a^] = [aj,, aj,] = (2.4) 



pi^v = 1,2, . . . , A^. The CCR expressed in Eq. (2.2) and (2.4) are related by a unitary 



matrix [/ = l/-v/2 ( . I such that if we define O"^ = (oi, 02, . . . ,aAr,aj,a2, . . . 

\In -1%/ 

, oJy) then Oj = UijRj. 

Notice that the representation of the CCR up to unitaries is not unique. For 
instance, for a single mode in the Schrodinger representation each degree of freedom 
is embedded in 7i = £^(M^), while the operators q and p act multiplicative and 
derivative respectively 

but also ^ = +i^j p = p is equally possible. In both representations the operators 
are unbounded. A way to remove ambiguities (up to unitaries) and to treat with 



The CCR are related with the classical Poisson brackets via the 1° quantization transcription: 

/ dA BB ae BA ■• ' ' - - - - 



{A,BU = E J|f J^ -S^i^)^ -i[^.^] = -KAB - BA) and ^ ^ i 
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bounded operators is by using Weyl operators. The Weyl operator is defined as 

W(^ = e'^^-^-^ (2.6) 

where C^ = (Ci,C2,...,C27v)eM2^. 

The Weyl operator acts in the states as a translation in the phase-space (displace- 
ments e^'^^\q) = \q — ri) and kicks e^^^\q) = c'^'^Iq')) as it can be checked by looking to 
its action onto an arbitrary position-momentum operator 

wlRiWt^ = Ri- Cil. (2.7) 

It satisfies the Weyl relation 

W^W^ = e-5«^-^-^M/^+^, (2.8) 

analogously, it fulfills 

W^W^ = Wr,Wt;e-'"^'^-^-'^, (2.9) 

showing the non-commutative character of the canonical observables. There exists 
only one equivalent representation of the Weyl relation according to the following 
theorem. 



Theorem 2.2.1 (Stone-von Neumann theorem) Let Wi and W2 be two Weyl sys- 
tems over a finite dimensional phase-space {N < 00). // the two Weyl systems are 
strongly continuous f\ and irreducible r\ then they are equivalent (up to an unitary). 

2.3 Phase-space 

Phase-space formulations of Quantum Mechanics, offers a framework in which quan- 
tum phenomena can be described using as much classical language as allowed. There 
are various formulations of non-relativistic Quantum Mechanics see e.g. |15j . These 
formulations differ in mathematical description, yet each one makes identical predic- 
tions for all experimental results. 

Phase-space formulations can often provide useful physical insights. Furthermore, 
it requires dealing only with constant number equations and not with operators, 
which can be of significant practical advantage. This mathematical advantage arises 
here from the fact that the infinite-dimensional complex Hilbert space structure 
which is, in principle, a difficult object to work with, can be mapped into the linear 
algebra structure of the finite-dimensional real phase-space. We will extend this 



map and show how to characterize states and operations in sections 2.4.1 and 2.3.2 
respectively. 

2.3.1 Phase-space geometry 

A system of N canonical degrees of freedom is described classically by a 2A^-dimensional 
real vector space [jy ~ M^-'^. Together with the symplectic form it defines a sym- 

"VIV) G H : limc^o II IV') - Wc\M = 0. 

^They are isomorphic (there exist a bijective morphism between the two groups). 
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plectic real vector space (the phase-space) Q ~ M^^. The phase-space is naturally 
equipped with a complex structure and can be identified with a complex Hilbert 
space Tin ~ C''^. If ( | ) stands for the scalar product in TIq and ( | )j for the 
symplectic scalar product in their connection reads 

{ri\0 = {Jv\Oj + Kv\Oj- (2.10) 

Notice that rj = (q,p) G Q while rj = q + ip G Tin such that any orthonormal basis in 
Tifi leads to a canonical basis in fi. Moreover, any Gaussian unitary operator (which 
preserves the scalar product) acting on T-Lq, leads to a symplectic operation S in 
the phase-space in such a way that the symplectic scalar product is also preserved. 
The inverse is also true provided that the symplectic operation commutes with the 
symplectic matrix J. 



2.3.2 Symplectic operations 



Gaussian operations [16] are completely positive maps, thus preserving the Gaussian 
character on states, that can be implemented by means of Gaussian unitary oper- 
ators (symplectic operations) plus Bell measurements (homodyne measurements). 
Homodyne/heterodyne detection is a fundamental Gaussian operation, that is, the 
physical measurement of one/two of the canonical conjugated coordinates. Neverthe- 
less we will concentrate for the moment with symplectic operations, hence canonical 
transformations S that preserve the CCR and therefore leave the basic kinematic 
rules unchanged. That is, if we transform our canonical operators Rs = S ■ R, still 



equation (2.2) is fulfilled. In a totally equivalent way, we can define symplectic trans- 
formation as the ones which preserve the symplectic scalar product and therefore [_] 

S^.J.S = J. (2.11) 

The set of real 2N x 2N matrices S satisfying the above condition form the symplec- 
tic group Sp{2N,M.). To construct the affine symplectic group we just need to add 
also the phase-space translations s that transform Rs = S ■ R + s and whose group 
generators are G\ = JijRj- Apart from that, the group generators of the represen- 
tation of Sp{2N, M) which physically corresponds to the Hamiltonians which perform 
the symplectic transformations on the states, are of the form Gij = |{-Rj, i?j}. This 
corresponds to hermitian Hamiltonians of quadratic order in the canonical operators. 
When rewriting them in terms of creation / annihilation operators we can divide it 
into two groups. Passive generators (compact): 

A(1) _ ; (a|iai/~a|,a^) M2) _ (a]lai^+ata^) 

and active generators (non-compact): 



'^From now on we neglect the subscript A'' in symplectic matrix. 



2.3. Phase- space 



a(3) _ . (dl,al-d„d^) A,{4) _ {al,dt+a^a^) 

^ liu — 1 2 ' ^ liu — 2 

The passive ones, are generators which commute with all number operators h^ = 
aliCi^, and so, they preserve the total number, in this sense they are passive. If 
the system under study is the electromagnetic field, what is being preserved under 
passive transformations is the total number of photons. In such a case, passive trans- 
formations can be implemented optically by only using beam splitters, phase shifts 
and mirrors. Conversely, only by using them, we can implement any Hamiltonian 
constructed by a linear combination of the compact generators. Finally, with all the 
five classes of generators, we can generate all the Gaussian unitaries, Ux = e^^'^. 

For one mode (A^ = 1) the simplest passive generator is the phase shift operator 
and its corresponding symplectic operation in phase-space 

Ue = e^'^'^^Se=(''''\ ""'V (2.12) 

y—smd cosOJ 

On the other hand, we have the active generators that change the energy of the 
state. The most important one is the single mode squeezing operator, whose unitary 
expression (for a squeezing parameter r > 0) and symplectic operation in phase-space 
reads 

C/. = ei(^-'^-)^5.= (^; 0). (2.13) 

For experimental reasons, instead of the parameter r one uses a decibel expression 
10 log e^*" in dBs |^ The squeezing operator squeezes the uncertainties on q and p in 
a complementary way i.e. it squeezes position while stretches the momentum with 
the same factor in such a way that the state remains as close to the uncertainty 
limit as it was before. When the squeezing parameter r is positive we call it a q- 
squeezer (amplitude squeezer). Analogously p-squeezer or (phase squeezer) occurs 
for negatives squeezing parameters. 

Finally, phase-space translations for one mode are described by the unitary and 
symplectic operation in phase-space 

{/„ = e""^^-"*^ ^Sa= ("^A (2.14) 

where a = 2Q±i^. 

For two modes (A^ = 2) the most important non-trivial unitaries are beam split- 
ters (refiectivity R = sin^ 6/2 and transmitivity T = cos^ 0/2) and two mode squeez- 
ers that amounts respectively to 



t_At. 



Uss = e2("i"2-«i«2) ^ s^^ 



/ cos 61/2 sin 0/2 \ 

cos 0/2 sin 0/2 

-sin 0/2 cos 0/2 

V -sin 0/2 cos 9/2 J 



(2.15) 



**A11 logarithms are in basis 10, unless differently specified. 
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and 



Utms = e'-('^i'^2-'^i'^2) ^ Stms 



/cosh r 





sinhr 


\ 





coshr 





— sinh r 


sinhr 





coshr 





V 


— sinh r 





coshr / 



(2.16) 



2.4 Probability distribution functions 

One of the most important tools of the phase-space formulation of Quantum Me- 
chanics are the phase-space probability distribution functions. The best known and 
widely used is the Wigner distribution function, but there is not a unique way of 
defining a quantum phase-space distribution function. In fact, several distribution 
functions with different properties, rules of association and operator ordering can also 
be well defined |17j . For instance sometimes normal ordered (7^-function) , antinormal 
ordered (Q- function), generalized antinormal ordered (Husimi- function) , standard 
ordered, antistandard ordered,. .. distributions can be more convenient depending 
on the problem being considered. In this thesis we are only going to work with the 
totally symmetrical ordered one (Weyl ordered); the Wigner distribution function. 

Due to the fact that joint probability distributions at a fixed position q and 
momentum p are not allowed by Quantum Mechanics (Heisenberg uncertainty the- 
orem), the quantum phase-space distribution functions should be considered simply 
as a useful mathematical tool. Joint probabilities can be negative, so that one deals 
rather with quasi-probability distribution. As long as it yields a correct description 
of physically observable quantities, their use is accepted. 



2.4.1 Quantum states and probability distributions 

We would like to see here now how to describe quantum systems of CV using probabil- 
ity distributions functions. Let's recall that a density operator p, defines a quantum 
state iff it satisfies the following properties 

trp = l, p>0 [^ P^ = P\- (2.17) 

Such operator belongs to the bounded linear operators Hilbert space B{7i). If the 
state is pure p = \ip){il^\ where |^) belongs to a Hilbert space C^ for qudits, (discrete 
variables system) or C'^{Q) for A^ modes, (Continuous Variable system). Notice the 
inconvenience of density operator formalism for CV since the states belong to an 
infinite dimensional Hilbert space. 

For systems of Continuous Variable, the Wigner distribution function gives a 
complete description of the state. Given a state p corresponding to a single mode. 
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the Wigner distribution function is defined as [j 

^piq,p) = - f dx{q + x\p\q-x)e-'^'P''. (2.18) 

This transformation is called Weyl-Fourier transformation and it gives the bridge 
between density operators and distribution functions. Sometimes, for computational 
reasons it is better to compute first the characteristic distribution function which is 
obtained through 

Xp(C,^) = tr{pW^(^,,)}. (2.19) 

The above two distribution functions are fully equivalent in the sense of describing 
completely our quantum state and are related by a Symplectic-Fourier transform 

Wp(g,p) = ^|dc|d^Xp(C,r?)e-'fP+''"' = ^STT{xp{C,v)}, (2-20) 

Xp(C,r/) = I dq I dpWp{q,p)e"^^^-''^'^ = 27rSTT-'{W,{q,p)}. (2.21) 

The Weyl-Fourier transformation is invertible and it provides a way to recover our 
density operator from both distribution functions 

^ ''dq [dp fdC /d7?>Vp((7,p)e-i«P+i^''W^(„^,_,) 



p = 


2tt 




1 




2tt 



■" ■" (2.22) 

dC, I (i??Xp(C,»?)W^(-C-r?)- 



At this level, W (and x) defines a quantum state iff they satisfy the following prop- 
erties: 

(i) the state is normalized 

j dqj dpW{q,p) = l, X(0,0) = 1 (2.23) 

and, 

(ii) the state is non-negative defined 

^ dqj dpW{q,p)Wp{q,p)>Q [^ W*{q,p) =W{q,p)] (2.24) 

27V 

^«:aiX(O-Ci)e^^'^^^-^-^^-^>0 [^ X*{C,V) = X{-C,-V)] (2-25) 

for all pure states Wp and for all ajj- G M. This can be shown using the following 
theorem: 



^For pure states the definition gets simplified to Wp(g,p) — - J dxe '^^'''^ ip* {q — x)ip{q + x) = 
— J dx\Vp{q,x)e~^^''^ . One can see a direct link between the wave function and the Symplectic- 
Fourier transform of the Wigner distribution via ip{q) = ^ y^,^ ni '^(|(^ + ^o)' 1(9 ~ 1o))- 
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Theorem 2.4.1 (Quantum Bochner-Khinchin theorem) For xiv) ^^ ^^ '^ character- 
istic function of a quantum state the following conditions are necessary and sufficient 
1.) x(0) = 1 and xiv) ^^ continuous at rj = 0, 
^■) xiv) ^'^ ^ ~ positive (symplectic-positive defined). 

2.4.2 Properties of the Wigner distribution 

Properties 

i) Quasidistribution: It is a real valued quasi-distribution because it admits nega- 
tives values. 



ii) T-symmetry: It has time symmetry 

t^-t^^ W(g, p, t) -^ W(g, -p, t). 

iii) X-symmetry: It has space symmetry 

q^-q^:^ W{q,p,t) -^ W{-q,-p,t). 

iv) Galilei invariant: It is Galilei invariant 

q^q-a<^^W{q,p,t) ^W{q + a,p,t). 



(2.26) 



(2.27) 



(2.28) 



v) T-evolution: The equation of motion for each point in the phase-space is classical 
in the absence of forces 



10 



dp 
~dt 



1 



[P.H] 



dyV{q,p,t) p dyV{q,p,t) 



vi) Bounded: It is bounded 



dt 



\W{q,p)\ < 



m dq 



IT 



(2.30) 



(2.31) 



For pure states [^ the demonstration reads 



\mQ,p)\' 



vr^ 



dxe-^'P''ij*{q-x)^{q + x] 



< 



< 



vr^ 



(2.32) 



dx |e'P^V(5 - x)\ dx le^'P^Xg + x) 



vr 



2" 



^"Remember that when we are speaking about states of hght m has to be interpret as permittivity 
of vacuum eo- Notice there is a minus sign difference with Heisenberg's equation of motion. 

dA 1, 



dt i 



[A,H]. 



(2.29) 



""^^For mixed states, use Schwarz's inequahty |{'i/'i|^2)P < (tpiltpi) {ip2\ip2) at the density operator 
level i.e. < tT{pip2)" < tr(pi)"tr(p2)" for n = 1. 
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vii) Normalized: It is well normalized 

dq dpW{q,p) = l. (2.33) 

viii) Quantum marginal distributions: It possesses good marginal distributions q] 

W{q) = JdpW{q,p) = {q\p\q)>0, (2.34) 

W{p) = I dqW{q,p) = {p\p\p) > 0. (2.35) 
ix) Orthonormal: The orthonormality is preserved 

--2TT [dq f dpW^iq,p)W^iq,p). (2.36) 



dqi'*{q)(j){q) 
If the distributions are equal -0 = (/> we conclude j dq j dpW'^{q,p) = i^ for all 



pure states, which is a lower bound in general see appendix 2. B and Eq. (2.81) 



also it excludes classical distributions such yV{q,p) = 5{q — qo)S{p — Po)- If 
they are orthogonal, ^p ± cp, we conclude j dq J dpW^{q,p)W(f){q^p) = which 
tells us that the Wigner distribution function, in general, cannot be everywhere 
positive. 

x) Complete orthonormal set: The set of functions yVnm{(l^p) form a complete 
orthonormal set (if ^nig) are already a set) 

2 dq dpWnm{Q,P)y^n'm'{q,P) = -^ ^■nn'^nira' ■, (2.37) 

Y,Wlm{g,p)WnM .V) = ^'^(9-'?')<5(p-p'), (2.38) 

where 

y^nra{q.V) = ^ f dx e-^'^^ rn{q ' x)i'm{q + x) . (2.39) 

2.4.3 The generating function of a Classical probability distribution 

Denoting by y (x) a random variable which can be discrete y £ {yi} (or continuous 
X £ [a,b]) and its corresponding (density) probability p{yi) {p{x)), we can establish 
the normalization constrain as 



b:._^.__ . ^ (2-40) 



EiPiVi) = 1 
jlp{x)dx = 1 

Of relevant importance given a probability distribution are the following quantities: 



^■^For pure states they correspond to the square modulus of the wave function in position j'i/;(g)p 
and in momentum |'!/'(p)P representation. 



Ill 



IV 
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Mean value of u{x): E[u{x)] = f u{x)p{x)dx. 

Moment of order m respect point c of x: a™ = E[{x — c)™"]. 

Mean value of x: fi = a^ = E[x]. 

Standard deviation of x: a = y^var(x) = \ ctji = ^jE[{x — //)^]. 

Covariance of Xi and Xj:r^ Cij = cov{xi,Xj) = E[{xi — fii){xj — /ij)], 

where i,j = 1,2,...,2N. 

Theorem 2.4.2 (Taylor's theorem) Any well behaved distribution function can be 
reconstructed by its (in general) infinite moments. 

This theorem, of considerable importance, tell us that any distribution p{x) can 
be retrieved by its moments a"^ only. We define the vector d and the matrix C called 
mean vector and covariance matrix by 

C = [[cov{xi,Xj)]] \ 

What is more important is that d and C encode all the information of I''* and 2'^'^ 
moments. 

If we define the generating function of a distribution function by a Laplace trans- 
formation (provided it exists) 

M{7]) = CT{p{x)} = Eie^"], (2.42) 

all moments can be obtained by subsequently differentiating the generating function 

a('^)M(7?) 



On 



dr]^ 



(2.43) 

r]=0 



2.4.4 The generating function of a quasi-probability distribution 

In the same way as in Classical Probability where all the moments of a distribu- 
tion characterize the distribution, the Wigner quasi-distribution function is fully 
characterized by its moments. To adapt the classical formalism to the quantum 
Wigner quasi-distribution function we have to introduce the following transcription 
r/ — > iri,M — > x^^'T — ^ -FT[__J We then define the generating function of the 
Wigner distribution (characteristic function) by a Fourier transformation, which al- 
ways exists, since the Wigner distribution is an integrable function. In general it is 
complex and reads 



^^Here subindex i,j labels all the possible variables of the distribution, when they are equal, Ci, 
corresponds to the variance var(xi) of the variable Xi. 



'CT{f{x)} = j^ f{x)e-y-dx while TT{f{x)} = -^ /^^ f{x)e''y-dx = f{y). 
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x(r,)=J^r{W(x)} = i?[e-''], (2.44) 

then all moments can be obtained by subsequently differentiating the generating 
function 



_ 1 5(™)x(r/) 
Po — 7 



dj]"^' 



(2.45) 

»7=0 



Analogously, we define, given a quantum Wigner distribution function the dis- 
placement vector (DV) d (a 2N real vector) and the covariance matrix (CM) 7 (a 
2N X 2N real symmetric matrix). The DV contains the information of the first 
moments. By the space symmetry only relative DVs are of physical meaning. The 
CM is much more richer, it contains information (up to second moments) about 
the purity, entanglement,. . .The CM 7, corresponding to a physical state must be 
symplectic-positive defined, i.e. 

7 + iJ>0. (2.46) 

Such a constrain also implies that, because the symplectic matrix is antisym- 
metric, that 7 > 0. Positivity implies hermiticity which translates here to 7-^ = 7. 



Its useful also to introduce here the symplectic spectrum ^ of the CM because 
the positivity condition reads, in terms of the symplectic eigenvalues, as /ij > 1, 
i = l,2,...,iV. 

2.5 Gaussian states 

Gaussian states are those states with a Gaussian Wigner distribution function. 
Among all the CV systems, Gaussian states, are of the greatest importance. A 
Gaussian distribution appears as the limit of many others and occurs in a great 
variety of different conditions. This fact is reflected in the Central Limit Theorem 
which is one of the cornerstone of the Classical Probability and Statistics Theory 
together with the Law of Large Numbers. 

Theorem 2.5.1 (Central limit theorem) Suppose we have n independent random 

variables xi,X2, ■ ■ ■ ,Xn which are all distributed with a mean value /x and a standard 

deviation a (each of them can have different arbitrary distribution functions Pi{xi)). 

In the limit n — )• 00 the arithmetic mean x = - ^^Li ^i ^^ Gaussian (or normal) 

1 _(*-f)^ 
distributed with mean value 11 and standard deviation -^ i.e. nix) = , — e 2^2 _ 



The importance of Gaussian probability distributions is also encoded in the fol- 
lowing theorem 



^^Every positive matrix M can be diagonalized under symplectics with a symplectic spectrum 
symspec(M) of the form {^i} and degenerated with multiphcity 2. The values {^li} are obtained 

2 



throw spec(-iJ'M) = {±^i}, i = 1, 2, ^il^iMl 
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Theorem 2.5.2 (Marcinkiewicz's theorem) If we define the cumulant generating 
function as K{r]) = In M(r/), then, either the cumulant is a polynomial of order 2 or 
it has infinite terms. 

Lemma 2.5.1 (Gaussianity lemma) p{x) is a Gaussian(non- Gaussian) distribution 
iff the cumulant is a polynomial of order 2(oo). 



In general, to describe a probability distribution, all moments are necessary but 
as long as we are concern with Gaussian distributions, 1^* and 2° moments are 
sufficient. In fact, all other higher moments can be rewritten in terms of them. This 



is a consequence of the theorem 2.5.2 



2.5.1 Displacement Vector and Covariance Matrix 

The Displacement Vector (DV) and the Covariance Matrix (CM) are enough to 
describe Gaussian states. Analogously to the classical case, it is straightforward to 
obtain the moments of order /3q* of a distribution by differentiating the generating 



function. Computing 1 and 2 moments, through (2.19) we get 
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/3o,i 



-iT^x(^) 



dvi 



tripR'i) 



ri=0 



(2.47) 



/3o^, 



u 



d^ 



drjidri. 



xiv) 



ri=0 



^tr{p{R\, R'j}) = iT{pR'.,R'j) - '-Jij, (2.48) 



where R'i = J ■ Ri. 

Finally, we define the DV and the CM as [^ 



di = iv{pRi) 

-jij = tr{p{Ri - dil, Rj - dji}) = 

= 2tT[p{Ri - dii){Rj - dji)] - iJij 

= 2Re{tr[p{Ri - dil){Rj - djl)]}. 



(2.49) 
(2.50) 



'Notice: (g^e'" ■") 



= iRi and (t 



,iv' ■R\ 



'7,,j=0 



— ^^[Ri^RA — RiRj — —2{Ri,Ri} 



where we have used Cambell-Hausdorff formula e^^^ = e'*e^e~2 1-^'^l (when [A, B] oc I). 

^''For pure states di = {Ri)p and -jij = {{Ri — dd, Rj — djI}) p = {{Rt, Rj})p — 2{Ri)p{Rj)p, where, 
by the anticommutator definition, we see a factor 2 of difference with the classical analog and so 
Jij ~ 2Cij. The diagonal terms can be rewritten in terms of the uncertainties as ja = 2{ARi)^ 

where as usual {AA)^ = y (A^)^ — {{A)^y. 
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2.5.2 Phase-space representation of states 

It is important to remark iiere tiiat symplectic operations at the level of the DV 
and CM act in such a way that any Gaussian unitary Us maps to the following 
transformation 75 = 5* • 7 • S and ds = S ■ d + s where S stands for an element of 
the symplectic group, while s stands for a phase-space translation. 

With these definitions it can be shown that the Wigner distribution of any Gaus- 
sian state can be written in terms of the DV and CM through 
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^^^-^^^'""'■'■'"'- P-^" 



while its symplectic-Fourier transform reads 



X(^) = e'^' ■^■''^' -^^ l^-" = e'^' ■'''-^' •l•^ (2.52) 

where d- = Jijdj and 7^ = J^^mJij- 

It is very useful when dealing with Gaussian states to represent them pictorically 
in the phase-space. As a example we plot here the Wigner distribution function of a 
rotated squeezed coherent Gaussian state in the phase-space as seen in Fig. |2.lK a). In 
Fig. |2.1[ b), we plot also its pictorical representation, obtained by an horizontal cut 
of the Wigner function at a factor e~^' ^ of the maximum. This closed curve fulfills 
the following expression y^r^ = e~^''^ (for Gaussian states is nothing else than an 

ellipse). The area A = ^7p = vrAgAp is closely related with the purity of the state 



see (2.80) and naturally constrained by the uncertainty principle in an appropriate 
frame {q,p), the one which uncertainties coincide with the major/minor semiaxes of 
the ellipse. This can be casted in the following theorem. 

Theorem 2.5.3 (Minimum uncertainty states theorem) Equality in Heisenberg's 
uncertainty theorem is attained iff the state is a pure Gaussian state i.e. a rotated 
squeezed coherent state, \ip) = UgUrUa\0)- 

All pure Gaussian states of one mode, characterized by its 7 (and if necessary 
by d), can be obtained from the vacuum state by an appropriate squeezing+rotation 



plus displacement in the phase-space. These states, by virtue of theorem |2. 5. 3[ are 
the minimum uncertainty states. Instead, mixed Gaussian states of one mode can be 
all obtained from a thermal state through a squeezing+rotation plus displacement. 
As the cornerstone examples of Gaussian states, we have the vacuum, coherent, 
squeezed and thermal states. One can compute their first and second moments and 
construct the corresponding DV and CM shown below. 



do = (U j . (2.53) 



• Vacuum: 0) s.t. a 0) = 

70 = 


A 0\ 
[0 l) 


^**We see here that max [W(C)] = W(d) = 
only |2.31l. 


1 


TT™ Vdct7 



< -^ where the equahty holds for pure states 
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a) 




P 

A 



Po 



b) 



Ap 

\K Ag 



90 



Figure 2.1: A rotated squeezed coherent Gaussian state with rotating angle = 50°, 
squeezing parameter r = 0.4 and displacement a = 2o+^^ g^^ Wigner distribution function 

of the state where dl^ = {qQ,Po). b) Gaussian state pictorical representation in the phase- 
space containing the DV and CM information where 2{Aq)'^ — cosh2r — sinh 2r cos 2(/) and 
2( Ap)2 = cosh 2r + sinh 2r cos 2(j). 



(Pure) Coherent:^ \a) = P(a)|0) = Ua\0) 



T A o\ 

7a = Sa^oSa = ( Q i 1 ' *^a = '^'a'^O + So 



(2.54) 



where a = an + iaj = ^^p. 



(Pure) Squeezed: \r) = S{r)\0) = ?X|0) 

-2r 



7r = Sr7oS, 







o2r 



, I , dr — (Sj-dg + Sr 



(2.55) 



(Mixed) Thermal: pp = :^^ J d^a\a){a\e-\'^\'''^ 



7/3 



2M + 1 

2M + 1 



0^ 
0/' 



(2.56) 



where M = ^pf}^_T^ > being /3 the inverse temperature (we fix units such that 
kB = 1). 



In Fig. 2.2 we plot pictorically the above examples. 



^''A Coherent state can alternatively be defined as the eigenstate of the annihilation operator, 
a\a) — q|q). Coherent states form an overcomplete non-orthogonal (|(Q|a')|'^ — e"'""" ' because 
(cija') — exp [—(lap + \a'\^)/2 + a*a']) set basis {-^ J d'^a\a){a\ =1) of vectors of the Hilbert space. 



2.5. Gaussian states 
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a) 




P 



Po 



> q 



b) 



1 

V2 



©^ 



V^ 



Qo 



c) 



v^ 



v^ 




> 9 



yMTl72 



e) 

Figure 2.2: a) Vacuum state, b) Coherent state being a — 20+^^ g) Squeezed state in 
position, d) Squeezed state in momentum, e) Thermal state of inverse temperature (3 = 
-^ ln( ^^^ ) • All states except the thermal state are pure and are also minimal uncertainty 



states {A= |). 
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2.5.3 Hilbert space, phase-space and DV-CM connection 

We have already shown how to describe quantum states and operations at different 
levels i.e. Hilbert space, phase-space and DV-CM. Two main connections are needed 
still to perform calculations in the phase-space: the ordering of the operators and 
the metric between them. 

The Weyl association rule tells us about the ordering operators. Provided we 
are using the Wigner distribution, which is symmetrical ordered, when working with 
observables we have to take into account that as we are in the phase-space (we have 
avoided its operator character) we have to symmetrize them. The way we have to 
symmetrize operators is 

giC(?+i»?p ^. giCg+iW ._ giCg+ir/p ^ ^ ^Kq+'^VP (2.57) 

where : : stands for the symmetrical order. In general for a polynomial on q and p 

r=0 ^''^ r=0 ^^ '^ 

(2.58) 
Lets us present an example, consider the observable QV, its quantum associated 
operator is of course qjp. We know that q and p do not commute but in the phase- 
space qp and pq are functionally treated in the same way. Imagine we need to find its 
average value, we have then to remove the ambiguity by symmetrizing. The recipe 
is qp — >: qp := '^^'^"^ i — )■ qp. And so the average to be performed is 

< QV >=< qp >p=< ^P±Pi + i/2 >^=< qp + i/2 >^ . (2.59) 

Operationally the averages on phase-space (with respect to the Wigner) correspond 
to the averages of symmetrical ordered operators on the Hilbert space. 

More important and relevant averages, concern the moments, which can be ob- 
tained via the Wigner distribution as 

d, = tT{pRi) = J S^C [Q] W(C) (2.60) 

and 

7,j = ir{p{Ri - dil Rj - djl]) = I d^^'C [2(Ci - di){Q - dj)] W(C) (2.61) 

where one see explicitly the symmetrization. 

Theorem 2.5.4 (Quantum Parseval theorem) Let W(^ he a strongly continuous and 
irreducible Weyl system acting on the Hilbert space Tin with phase-space il. Then 
A I— 7- A^{rj) = tr{AWrf}, with r] £ Q, is an isometric map from the Hilbert space Hn 
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(Hilhert- Schmidt operators) onto the Hilbert space £^(il) (square-integrable measur- 
able functions on 0,) such that 

tr(it^) = j^ j d^^'rj tr{AWr,rtr{BW,}. (2.62) 

From this theorem of capital importance, follows how to compute the scalar 
product between operators 



tr{it^} = ^ j d^'^i^ A^*{rj)B^r^) : 



(2.63) 



where the trace of an operator is defined via 

tr{i} = ^^0,0) = ^ jd^'^C ^^(C), (2.64) 

and the expectation value of an observable 



{A), = tr{M} = J^Jd'^'v X*{v)AHv) 



(2.65) 



To justify the above expression we just need to define properly the Fourier- Weyl 
transform for an arbitrary operator as 



(2vr) 
and its inverse 



A = TWriA^rj)} = -^ j d^""^ A^{r,)W.r, 
- -^ fd'^v Id'^C A^{Oe'^^-^-^W.,, 



(2.66) 



A^{r]) = TWT-'{A} = tr{AVF^}, (2.67) 

A^{1, 7?) = 2^ / d^\ (C + A|i|C - A)e-2i*'^ (2.68) 

where C^ = (Ci, C2, • • • , Cat) idem for f). 

The two equivalent representations characteristic (x) and Wigner (W) are STT 
related • 



^°Use that I^ = 1 and I'' = (2-k)'^ &''^^\r]) computed from Eq. ( p^est and Eq. p^ l. 

■^^Notice that A^ — (27r)'^VV \i A = p see Eq. ( 2.18 1 (for normahzation convenience) while A^ — x 



if ^ = psee Eq. (2.191 
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yl^(C) = SFT{A^{r^)} = ^ j d^^r? A^{^)e~-<^-^-\ (2.69) 

^x(^) = SFT-^iA'^iC)] = -^jd'^C ^^(C)e'^"^-^. (2.70) 

With the above transformations everything is now prepared to be translated in 
the phase-space. 

2.5.4 Fidelity and purity of Continuous Variable systems 

An important concept in statistical physics is to know how close/similar two distri- 
butions are. The natural solution is to construct a distance between distribution by 
choosing a proper metric in the distribution space. A metric M is well defined if it 
satisfies the following properties: 

i) Symmetric: M{X,Y) = M{Y,X). 

ii) Triangle inequality: M{X, Z) < M{X, Y) + MiY, Z). 

iii) Identity: M{X,Y) = iff X = y. 

iv) <^ i)+ii)+iii) Non-Negativity: M{X,Y) > 0. The demonstration reads 2M(X, y) 
M{X, Y) + M{Y, X) > M{X, X) = 0. 

Classically given two probability distributions {qx} and {px} one can define the 
trace distance D and the fidelity F between them as follows 



Di{Qx},{Px}) = l^\qx-Px\, (2.71) 

X 

F{{qx}, {Px}) = Yl \/9^' (2-72) 

X 

while the trace distance is a proper metric this is not the case for the fidelity since 
it fails to agree with iii). 



The quantum analogues quantities are the quantum trace distance ^^ and the 
quantum fidelity 



V{p,a) = ^tr\p-a\, (2.73) 



F{p, a) 



tr^pV2api/2 



(2.74) 
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Trace distance is constructed throw the trace norm 1 1 1 1 1 defined for an arbitrary matrix 
M as ||M||i = tr|A/l = trVM^M = J] singularvalues(M) = J^; eigenvalues (VM^^) = 
J2spec{VMTM). 
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They can be related to the classical ones by considering the probability distributions 
obtained by a measurement 

V{p,a) = ma^D{{qn},{Pn}), (2.75) 

{En} 

VHp,^) = min F{{qn}, {pn}), (2.76) 

{En} 

where {g„} = tr(/5£^„), {pn} = tr((j£^„) are the probability distributions of an arbi- 
trary positive-operator- valued measurement (POVM) i.e. fulfilling ^^En = I. 

Not only P(/), a) is a proper metric, but also are the so-called Bures distance and 



Bures angle defined as B{p,a) = J 2 — 2yjT{p,a) and A{p,a) = aiccos{yjT{p, a)) 
respectively. From now on, we consider exclusively the properties of the quantum 
fidelity (also-called Bures-Uhlmann fidelity). 

It's not obvious but it is symmetric and normalized between 1 (equal states) and 
(orthogonal states). Its definition is simplified when one of the two states is pure 
(say pi), in this case it converges to the Hilbert-Schmidt fidelity 

J-(pi,P2) = tr(;5ip2) = (V'i|P2|^i>. (2.77) 

In case both states are pure, then, the fidelity becomes simply the overlap (tran- 
sition probability) between the two states 

F{pi,p2) = \{^i\^2)?. (2.78) 



It is useful here to use theorem |2.5.4 to evaluate the Hilbert-Schmidt fidelity 



between two Gaussian state (when at least one is pure) 
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Hp,rP2) = iT{hP2) = (^) J d'''vxUr])X2{v) = (2vr)^ / d^^C Wi(C)W2(C) 



detC-W^) 



where 71(2) and di(^2) belongs to /5i(2); while d = d2 — di. 



(2.79) 



Another important concept in Quantum Information is the purity T' of a quantum 
state. In general, a pure state is a state which can be written in a suitable basis as 
a ket {p = \^p){■^p\) in the Hilbert space, and so /P = p [=^ tr/?^ = 1]. A mixed state, 
on the contrary, cannot be written as a ket but only as a density operator and then 
p^ 7^ p. In Continuous Variable a generic mixed state can always be written (for 



example using the Q-function representation ^^) as p = f d'^aQ{a)\a){a\. 

^''The second and third equality is true for all CV states. 

^^Q-function is defined as Q{a) — ^(a\p\a) and normalized as J d^aQ{a) — 1. 
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The purity, which measures how close is the state from a pure one, is defined as 
follows 

V{p) = tr(p2). (2.80) 

While for qudits it is normalized between 1 (pure states) and ^ (maximally mixed 
states), for Continuous Variable systems ("d — )• cxd") maximally mixed states have 



purity 0. Using theorem 2.5.4 we can evaluate the purity of a Gaussian state 
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V(p) = (2vr)^ / d^^C [W(C)]' = ^^. (2.81) 



2.5.5 Bipartite Gaussian states, Schmidt decomposition, purifica- 
tion 

At the level of density operators, multipartite systems are described on a tensorial 
Hilbert space structure. This means that we have to "tensor product" (8), the Hilbert 
space of each party i.e. 7i = (^j^^^Tik- Notice however that multipartite Gaussian 
CV systems have a covariance matrix corresponding to a "direct sum" ©, of each 
party's associated phase-space i.e. J7 = 0^=1 ^k- This is reminiscent of the Quan- 
tum Parseval theorem, which transforms tensor product between density matrices to 
products of Wigner functions (and Characteristic functions) and at the same time 
direct sums of covariance matrices and displacements vectors. Therefore, an ad- 
vantage on Gaussian states is that we fully describe a state by a finite dimensional 
N X N matrix plus a A'^ x 1 vector instead of its corresponding infinite dimensional 
density matrix. Additionally, dimensionality of the phase-space increases slower, as 
dimensions are added instead of multiplied. 
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An important property of Gaussian states is that their reductions are again 

Gaussians. Imagine we have a bipartite Gaussian state p with covariance matrix 

7 composed by Na + A''^ = A^ modes q} then tracing the A'^ modes corresponds to 

the reduced state pA = tr^p with covariance matrix 7^ obtained by the upper left 

Na X A^^ block matrix of 7 (vice versa with B). Therefore any bipartite Gaussian 

/A C\ 
state can be written in a block structure as 7 = I „rp ] , where A = A'^{= ja) 

and B = B {= 7^) are the reductions while C amounts for the correlations between 
the modes. 

For discrete variables, the Schmidt decomposition asserts that every pure bipar- 
tite state IV') (supposing Na > Nb) can be transformed by local unitary operations 
to the normal form \ip) = X]i=^ ^/K\^i) "^ \fi) where {ei}{{fi}) are orthonormal ba- 
sis of A{B) and {Aj} is the spectrum of the reduced state for B, ps = tTA\i^){4'\ 
satisfying A^ > and Y.^^1 -^? = 1- 

^^The first equality is true for all CV states. 

^^Remember that dim(pi ® P2) = dim(/5i) dim(p2) while dim(7i © 72) = dim(7i) + dim(72). 
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From now on we suppose Na > Nb- 



2.5. Gaussian states 
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Theorem 2.5.5 (Schmidt decomposition) Every pure bipartite Gaussian states of 
N = Na + Nb modes N^ > Nb, by local symplectic transformations can be brought 
to the normal form 

Nb 

7 = 7oe07i, (2.82) 

fXi Ci 0\ 

Xi -a 
a Xi 
\0 -Ci Xi J 
symplectic spectrum of the reduced covariance matrix for B. 



where -fo = l2(^^^_Ng), Ji 



, being Ci 



A? — 1 and {Aj} the 



We see a very peculiar behavior here, each mode of B is entangled with at most 
one mode of A. The remaining Na — Nb modes of A are uncorrelated. 

Lemma 2.5.2 (Standard form I) Every 1x1 mode (mixed) Gaussian state can be 
transformed, by local symplectic transformations to the standard form 



7 



(Xa 





Cx 0\ 





Xa 


Cp 


Cx 





Afe 


Vo 


Cp 


xj 



(2.83) 



A Gaussian state in the standard form is called symmetric if A^ = Af,, and fully 
symmetric if it is symmetric and in addition Cx = —Cp. 

There is a simple way to construct the standard form if one uses the following 
four local symplectic invariants, p^| the purities Va = l/Vdet A = 1/Xa, Vb = 



'1/2 



, and the serelian 



1/Vdet B = 1/Afe, V = l/\/d^ = [{XaXb - cl){XaXb - c 

A = det A + det B + 2 det C = A^ + A^ + 2cxCp because they can be inverted as follows 



Xa = I/Va, 

Xb = I/Vb, 
_ VVaP^ 

Cx- ^ 

VVaPb 



(a_ +a+), 
(a_ -a+). 



(2.84) 



a± = V [A - {Va ± ^b)V(7'a^b)2]^ - 4/p2. 

The local and global purities, Va, Vb and V of the state are constrained to be 
less or equal to one, i.e. Xa, A{, > 1 and {XaXb — c'^){XaXb — c^) > 1. The symplectic 



^* These four invariants can be written in terms of the symplectic spectrum of the covariance matrix 
of the state and its reductions as P = 1/vTT7a?. ^ = I^i A*?, 'Pa = 'i-fJUi tJ-A,ii Pb = l/\/ Hi ^l.i- 
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positivity (2.46) implies, in terms of the invariants, that 1 + ;p2 > A or equivalently 



/cosh 2r 





cosh 2r 


sinh 2r 



\ 

— sinh 2r 


sinh 2r 





cosh 2r 





V 


— sinh 2r 





cosh2r / 



1 + (AaAfe - ci){XaXb - 4) >Xi + Xi + 2CxCp. 

We stress here that all pure bipartite Gaussian states are symmetric (A^ = A(, = 
A) and fulfills Cx = —Cp = \/A^ — 1 being A > 1. Introducing the change of parame- 
ters, cosh 2r = A we can write any pure bipartite 1x1 Gaussian state as a two mode 

squeezed state jtms = Stms^S'^ms 

with positive r. 

Lemma 2.5.3 (Purification) Every (mixed) Gaussian state of N^ modes repre- 
sented by 'jA admits a purification, i.e. there exist a pure Gaussian state of 2Na 
modes whose reduction is ja o-nd reads 

/I n \ ®^^ 

with C = JV-{J-fA?-ieA where ^^ = f _ J 

2.5.6 States and operations 

By virtue of the Choi-Jamiolkowski isomorphism between completely positive (CP) 
maps acting on B{y.) (physical actions) and positive operators belonging to B{y.) 
B(T-L) (unnormalized states), Gaussian operations were fully characterized in [16]. In 
there the authors showed that each Gaussian operation Q can be associated to a cor- 
responding Gaussian state G i.e. there exist an isomorphism between Gaussian CP 
maps and Gaussian states. Since all Gaussian states can be generated from vacuum 
state by Gaussian unitary operations and discarding subsystems, then symplectic 
transformations plus homodyne measurements complete all Gaussian operations. 

Lemma 2.5.4 (State-operation's isomorphism lemma) If aNA^Ns-mode Gaussian 
state G is defined by its first and second moments through 

then the application of Q on a Ns-mode Gaussian state {'y,d) produces a NA-mode 
Gaussian state {'y',d') such that 

G: 7^7 = TA-TAB^^^^rls, (2.87) 

rB + 7 

d^d' = Aa + Tab^ — (Afi + d), (2.88) 

Tb + 7 

where t = {In ® On)T{In 9n) with N = Na + Nb- 
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Hoinodyne detection is a typical example of a Gaussian operation, which realizes 
a projective (or von Newmann) measurement of one quadrature operator, say x, thus 
with associated POVM |3;)(x|. Take a Gaussian state 7 of A^ modes, it can always 
be divided into A^^ x A''^ modes as 



7 



7A C 

C^ IB 



(2.89) 



and with zero displacement vector. Then, a homodyne measurement of x on the last 



Nb modes, by the lemma |2.5.4[ can be described by a Gaussian operator px with 
corresponding DV and CM given by 



A 



(0,0,...,x,x, ...) 



and 



Tx = lim 



/ coshrlAT^ sinhr^Tv^ 
sinh r Ona cosh r In a 



\ 














1/r 
r 



^N, 



J 



Summarizing, if we measure the x component of the last Nb modes corresponding 
to i?, obtaining the result (xi, X2, . • • , xj^^), system A will turn into a Gaussian state 
with covariance matrix 



and displacement vector 



7^ = 7A - C' {X^BXr'-C, 



(2.90) 



d'^ = C (X7bX)-^'-^4, (2.91) 

where d'^ = {xi, 0, X2, 0, . . . , x^g , 0), M^V denotes Moore Penrose or pseudo-inverse 
(inverse on the support whenever the matrix is not of full rank) and X is the projector 
with diagonal entries diag(l, 0, 1,0,.. .). 

Heterodyne measurement, whose POVM corresponds to -|a)(a|, and in gen- 
eral ^^ all POVM of the form I7, d)(7, d\, can be achieved with homodyne measure- 
ment by the use of ancillary systems and beam splitters. 



2.6 Entanglement in Continuous Variable: criteria and 
measures 

Concerning bipartite entanglement, for discrete variable systems an important sep- 
arability criterium based on the partial transpose (time reversal) exists. If /> is a 
generic state, then fr^ represents the state after one perform time reversal on sub- 
system A. 



'All pure Gaussian states can be obtained from ja) by Gaussian unitaries. 
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Lemma 2.6.1 (NPPT Peres criterium) Given a bipartite state p, if it has non- 
positive partial transpose (p^^ ^ =^ p^^ ^ 0), then p is entangled [E] . 

Lemma 2.6.2 (NPPT Horodecki criterium) In C^iSiC^ and C^iSiC^ given a bipartite 
state p, it is entangled iff it has non-positive partial transpose (fr^ ^ =^ p '^ ^ Oj 

im. 



For Continuous Variable states, Peres criterium also holds while Horodecki criterium 
is true provided our state is composed of 1 x A^ modes. In particular for Gaussian 
states, time reversal is very easy to implement at the covariance matrix level. If T 

is the reversal operator then St = = { i ) i^ the corresponding symplectic 



operations in phase-space. So we can rewrite the lemma 2.6.2 for Gaussian states. 



Lemma 2.6.3 (NPPT Simon criterium) For IxN modes given a bipartite Gaussian 
state 7, it is entangled iff it has non-positive partial transpose (Oa'^O'^ + i,y ^ =^ 

OBiOl + ij^o) [201 ED. 

Under partial transposition the serelian changes asA— 7>A = A — 4 det C = A^ + 
A^ — 2cxCp and so positivity of the partial transpose can be written, in terms of 
invariants, as 1 + ^2 ^ A while in terms of the symplectic eigenvalues of the partial 
transpose, as /ij > 1, -i = 1, 2, . . . , A^. 



Lemma 2.6.4 (CV Inseparability Duan criterium" '^^ We define the EPR-like op 



erators, u = \a\xi -\ — X2 and v = \a\pi p2 where a G M. If a bipartite state p 

(Gaussian or non-Gaussian) is separable, then (A-u) + (Av) > a^ + ^, for all 

a£R [22J. 

Lemma 2.6.5 (GS Inseparability Duan criterium) Any bipartite Gaussian state p 
can be written in standard form II (by two local squeezings on standard form I) as 
/ ni ci \ 

7= ° I' ^^ ^here ^ = ^, \c,\ - jc^l = ^(-i " l)(-i " 1) " 

V C2 m2 J 

y/{n2 — l)(wi2 — 1), then the state is separable iff (Au) + (A?)) > Oq -\ — 2, for all 

oo G M, where Og = w ^^Zi = \/^~f '^'^d EPR-like operators u = qqXi — ^\-^X2 
and V = aopi - jfy ^P2 |22]. 

Concerning entanglement measures it is usual to deal, as an entanglement mea- 
sure for pure state, with the entropy of entanglement and for mixed ones with the 
logarithmic negativity. 



^°For all CV states a less restrictive upper bound is imposed by the uncertainty principle, i.e. 
(Au)p + {Av)l > |a^ - ^1 due to the sum uncertainty relation (AA)^ + (ABf > 2AAAB > 

m,B]}\. 
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• Entropy of entanglement: 

Es{p) = S{pa) = -tr{pA log2 pa), (2.92) 

where S is the von Neumann Entropy S{p) = —tic{plog2 p), and pA is the re- 
duction of ^. For any CV state it reduces (in terms of the Schmidt coefficients) 
to 

oo 

Esip) = -J2xnog2>^l (2.93) 

while for Gaussian states (in terms of the symplectic eigenvalues), 

Esil) = - E[(^) log2(^) - (^) log2(^)], (2.94) 

where {±/ij} = spec{—iJ'^A)- 

The entropy of entanglement is the "unique" measure of entanglement for pure 
states. It depends only on the Schmidt coefficients and not on the choice of 
basis, therefore it's invariant under local unitary operations. Furthermore it's 
unique because all other entanglement measures are in direct correspondence 
with the entropy of entanglement. 



• Logarithmic negativity |23) : 

En{p) = LN{p) = log^Wp^^lU, (2.95) 

where || ||i is the trace normrM For any CV state it can be written (in terms 
of the negative eigenvalues of the partial transpose) as 

oo 

En{p) = log2[l + 2 J^ I min(Ai, 0)|], (2.96) 

while for Gaussian states (in terms of the symplectic eigenvalues of the partial 
transpose), 

N 

^7v(7) = -J^log2[min(/ii,l)], (2.97) 

j=i 

where {±/Uj} = spec(— ij'7^^). 

The negativity N{p) = ^ ~ is also a computable measure of entanglement 

for mixed states. It quantifies the violation of the NPPT criterium i.e. how 
much the partial transposition of a density matrix fails to be positive. It's 
invariant under local unitary operations and an entanglement monotone. For 
Gaussian states reads 

■^^The trace norm for hermitian operators is simple because llA/||i = trv Af^ = Yl ispec(Af)j = 
1 + 21] ]negativevalues(Af)|. 
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2. A Appendix: Quantum description of light 

2.A.1 Classical harmonic oscillator 

A ID classical harmonic oscillator obeys a second order ordinary differential equation 
X = —LtP'x in tiie position x where a; is the angular frequency. This equation can be 
derived in the Lagrangian formalism from the Lagrangian L = yi;^ — ^^^^j;^ using 
Euler-Lagrange equations. Here the constant m turns to be the mass. 

To treat this system quantum mechanically one need first to derive the Hamilto- 
nian of the system, say ^"^ H = — ^^ ^Xi — L = ^ + ^^^x^, and perform the 1*^* 



quantization transcription. One ends up with the Hamiltonian operator 

and a commutation relation that says [x,p] = ih. 

2. A. 2 Light modes as independent harmonic oscillators 

Since Maxwell, we know that classically, light can be relativistically described P^| by 
the so-called Maxwell field equations. As we will show, each mode of the electromag- 
netic field is an independent harmonic oscillator with the same classical dynamics. 
This is shown by constructing the classical Hamiltonian from the Maxwell equations 
as follows. 

We start with Maxwell equations for the electric and magnetic field in presence 
of sources (p) and currents (J) 



V-S =0, 



9B (2-100) 



where Eq is the permittivity and fiQ the permeability of the vacuum. It's here useful 
to introduce the scalar, (p, and vectorial potential. A, fields throw E = —Vcj) — ^ 
and B = V X A. They are more fundamental although not so very "physical" (it 
is not gauge invariant, for example). Nevertheless it helps to simplify the calcula- 
tions, because in this way we end up with only one scalar and one vectorial second 
order partial differential equations, being the other two remaining equations trivial 
identities 

V2(/.+ |(V-l) = -^, 

"* ^0 - (2 101) 

V2l_ V • (V • 1) = ^oeo|(V</.+ 1^) - poJ, 

, . fir 



''As usual p is the canonical momentum conjugated to x, i.e., p — ^ — mx. 
^''Conipactly in covariant form they read di_i,F^" — —J" and (J^-F'"^ = where J^ = (cp, J) is the 
4-vector current and _F,t^ = dfi,A,j — d^A^ the 4-tensor Faraday with A^ — {cj>, cA). 
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From now on we work in free space J = p = 0[=^ <p = 0]. We still have the freedom 
to fix the gauge. The appropriate gauge is the radiation (Coulomb) gauge V ■ A = 0. 
As a result we end up with the wave equation 



35 



V^ 



1^ 

C2 9t2 



^ = 0. 



(2.102) 



An ansatz for the solution of the vector potential can be written as a superposition 
with polarizations a = x,y and frequencies k motivated by the linearity plus a 
separation on time-space variables 



M'f'^i) = '^^k,a{'^,t) =y^gA:,»(t)-Ufc,a(^)- 



(2.103) 



k.c 



k,a 



With such an ansatz, the wave equation decouples in a Helmholtz equation V^-u^ Q,(r) = 
—k'^'Uk,air) and a harmonic oscillatory equation qk,a{'t) = —(?k'^<lk,a{t). For the spa- 
tial solution, it is conventional to define a "box" of volume L^ in such a way that 
the normalized solution (J^^s d?rul.^{r)uk'^a'{r) = Sk,k'Sa,a') correspond to traveling 
plane waves 



Uk,a{^) 



^" ik-r 

- t- 1 



^3 



(2.104) 



where e^ is the polarization vector. This is so because we have imposed periodic 
boundary conditions on the walls of the quantization box in order to mimic the 
behavior of the electromagnetic field in free space (in order to find expressions in the 
continuum one has to perform the limit L — t- oo appropriately). For the temporal 
solution, we recall that the corresponding classical Hamiltonian is Hf^^ = 2^^^k'ik a~^ 
^Pk a- "^^^ solution is nothing else than a oscillatory movement in the qk,a{t) 
coordinate. We introduce the conjugate momentum ^6 pj^^^{t) = rnqf^ait). The 
angular frequency is w^ = ck while the "mass", which is a free parameter in the 
Lagrangian formalism, has to be identified with the permittivity eq of the vacuum. 
Thus one has to solve the coupled system 



Pk,a 
qk,a 



£0 



-EQiOj^qk^a-, 
Pk,a: 



which decouples with the change of variables 



37 



^)to 



2h vy ^ eouj' 



(2.105) 



ak,< 



a 



k,a 



—'^^kak,a-, 
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Recall that /io£o = 1/c 



0. 



^^In covariant form it reads DA" 

36 ; 

'^'^The inverse transformation results in q ■ 



^®As usual p is the canonical momentum conjugated to x, i.e., p — ^ 



h 



(a* + a) and p = i 



2 



(a* 



(2.106) 
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with trivial oscillatory solutions ak^a{t) = flfc.oC "^'=* and a|,^(t) = 0^0,6"^**. Finally 



<lk,a{t) = y ^(«'^,«e--'=* + 4,«e-'=*). (2.107) 

Grouping the space and time solution and sumniing over (fc, a) one obtain the elec- 
tromagnetic waves solution A^ ^(r, t) = f{k ■ r it w^t). 

2. A. 3 Quantization of the electromagnetic field 

If we quantize the solution for the potential vector we can now write it in terms of 
creation and annihilation operators with bosonic commutation rules [afc^Q,a|,^] = 

^k,k'Sa,a' aS 



^V"*' *) = E ^^^J^ (ea6,,„e'(^^-^-'=*) + e-;o^e-(^-^-'=*)) . (2.108) 

k,a V 

Quantized electric and magnetic fields can be straightforward recovered via definition 
of A. In the Heisenberg picture, the following expressions are obtained 



kr,t) = -p{f,t) = iE V 2?^ (e.a.,„e'(^— ^*) - eZal^e~^^'-'-^'^ 

k,a 

(2.109) 
where the unitary electric field polarization vector Cq -L A; because V ■ E = being 



6^-6^' = da^a' and 


k,a 




g{f,t) = VxI{f,t)-- 


1 2L3 



(2.110) 
where the unitary magnetic field polarization vector /q, = Cq, x p- ± ea,k fulfills 

\k\ 
let ' Jet' "0,0' • 

One can compute the Hamiltonian for a single mode 

Hk,a = ^ d^f f eol^fe.al^H l^fe.aM = ^- (4,a^fe,a + «fe,a4,a) ' (2.111) 

then the total Hamiltonian reads 

Hem = \j,^ c^vTeol^l' + — l^l') = E^'^'^ («L«M + ^) • (2-112) 
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<^('"*o)><i(r,io)> 




Figure 2.3: Electric, magnetic and wave vectors of an electromagnetic traveling plane wave 
at a fixed time fo- 



It is in this moment wtien one can, by comparing the above Hamiltonian with the 
one of the quantized harmonic oscillator 



Hho = ^fujki 4,Q^fc," + 2 ) ' 

k,a ^ ^ 



(2.113) 



associate each mode of the electromagnetic field to an independent harmonic oscil- 
lator with the same frequency. 

2. A. 4 Quadratures of the electromagnetic field 

To end with the comparison between the light and the harmonic oscillator we present 
here -in analogy to the position-momentum coordinates of the massive particle in the 
harmonic oscillator- the amplitude-phase quadratures of light modes. Q-quadrature 
(amplitude quadrature) : 



P-quadrature (phase quadrature): 



4,a + Qfc.a 

V2 



(O-Ia - ^k,, 



V2 



Pk,a = 1- 

with bossonic commutation rules 

[Qk,a,Pk',a'] = ^h,k'Sa,a', 

and Heisenberg uncertainty principle 

AQAP>^|<[Q,P]>| = ^. 



(2.114) 



(2.115) 



(2.116) 



(2.117) 
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In terms of the quadratures the Hamihonian reads 

Hem = Hho = Y.^ (^L + ^m) ' (2-118) 



while the electric field ^^ 



1-^(^01 = X] \/~P {Qk,aSm-{uJkt-k-r) - Pfc_„ cos (w^t - k ■ f)j . (2.119) 

k,a 

The uncertainty principle is encoded between the non-commuting observables poten- 
tial field A and electric E (or magnetic field B). Quadrature operators are nothing 

else than observables proportionals to A and E at the same time, and so they contain 
the same information about the light. But in an harmonic oscillator the position and 
momentum are always one quarter cycle out of phase, therefore the amplitude of the 
electric field "now" and a quarter cycle later efi'ectively describe both the electric 
and potential field. 

2. A. 5 Quantum states of the electromagnetic field 

We have seen that the Hamiltonian can be written as an harmonic oscillator for each 
mode, thus the eigenstates of the Hamiltonian are Fock states, which turn out to be 
a very suitable basis to express generic quantum states of light. In section 2.5.1 we 
have described many examples of Gaussian states at the phase-space level. Here the 
aim is to describe them by looking at the expectation value of the time dependent 
electric field as well as its fluctuations. To this aim, we compute and plot (see 



Fig. 2.4), explicitly the expectation value of the electric field. In general 



< \E{r,t)\ >r^<Q> sm{ujt - k ■ f)- < P > cos^cot - k ■ f) , (2.120) 

and its corresponding uncertainty (fluctuations) 

{AE{f, t)f ~ {AQf sm'^iojt - k ■ f) + {APf cos^(a;t -k-f)- 



-V{Q, P) sin(a;t — k ■ r) cos{ujt — k ■ f), 



(2.121) 



where V{Q,P) =< {Q,P} > -2 < Q >< P >. We list here the most relevant 
states of the electromagnetic field. Among them, Gaussian states produced in the 
lab with coherent laser light and linear optical devices. We write them in the Fock 



basis as it is a very convenient basis for all calculations needed (see Tabs. 2.122 and 



2.123 for detailed calculations). 



*The classical values for the fields correspond to tfie expectation values for the quantum fields. 
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Vacuum state, |0), is the only Gaussian state of all Fock states. It can be 
defined as the ground state of the harmonic oscillator. 



<\Eif,t)\>=0, 
AE{r,t)r^Jl. 



Fock states ^^ , |n), are eigenstates of the number operator, and thus, so of the 
energy because H\n) = En\n). They are non-Gaussian and can be written as 

the n-th excitation (photon) from the vacuum, \n) = '■"^ |0) via the ladder 
operators that act on them raising and lowering the number of photons presents 
in the state a^n) = \Jn + l|n + 1), a\n) = ^Jn\n — 1). 

<|l(f,t)|>=0, 



A^(f, t) ^ \n + \ 



2- 



Fock superpositions, \tjj) = X^j^i|?^i) are non-Gaussians. The simplest one, is 
1^) = TjdO) + |1)) with balanced amplitudes. 



< \E{r,t)\ >~ J\sm{ijjt - k-r), 

AE{f, t) ~ J I sin^(a;t - k ■ r) + cos'^{u}t -k-r). 

Coherent states, \a), are defined as the eigenstates of the annihilation operator 
a\a) = a\a) or as \a) = e 2^ S^o "^1^)- Coherent state have not a well 
defined the number of photons (n = a^a) because {n)a = |ap and (An)^ = \a\, 
nevertheless, as a increases the relative indetermination ,J^'°' = \a\~^ tends 

' {n}ci ' ' 

to zero. Coherent state have equal variance and mean, therefore, its photon 
distribution is Poissonian. It is immediate to see that if one computes the 
probability to find n photons in a coherent state i.e. Pn = |(n|a)p = „! e~'°'' 
which is clearly a Poissonian distribution with mean and variance |ap. 

< \E{f, t)\ >~ \/2Re(a) sin(cjt -k-r) - y/2lm{a) cos(a;t -k-r), 
AE{r,t)r^Jl. 



Squeezed states, \r), are minimal uncertainty states with arbitrary small un- 
certainty in one quadrature while increased uncertainty in the orthogonal one. 
Squeezed states of the light fields are used to enhance precision measurements. 

They read in Fock basis as \r) = , ^ ^ V°^n(— i^ tanhr)"-^^^— -, — '-\2n). 
<|l(f,t)|>=0, 



AE{f, t) ~ V ge-^'- sm^{u)t - k - r) + ^e^*^ cos2(u;t -k-r). 



'Complete orthonormal set basis (njm) = 5n 
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Thermal states, /5^, are a superposition of all Fock states occupied with a 
probability P„ = (1 — Q-pnw^^-jinwn ^ j^)g ^j^^ quantum distribution function 
which describes the thermal state statistics of the blackbody radiation. At the 
Fock level they read as pp = {l- ^-1^^^) Yln=o^~'^^''\^)'\^\- 



<\E{r,t)\ >=0, 
AE(f,t)~ JM + i. 
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Continuous Variable formalism 



We can summarize the above results in the following tables: 
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(2.122) 





<Q2> 


<P2> 


<QP> 


<PQ> 


yi.Q,p) 
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~ 2 





In) 


"+ 5 
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P/3 


M+ i 
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2 


~ 2 






(2.123) 

Recalling section 2.5.1, on one hand the expectation values of the two quadratures 
are encoded in the displacement vector which gives the center of the diagrams in the 
phase-space. On the other, the two uncertainties are encoded in the diagonal terms 
of the covariance matrix and express the width of the phase-space points. The off 
diagonal terms (symmetries) contain the information of the Q-P correlations. We 
observe then, that the components of the displacement vector are closely related 
with the amplitude of the electric field while the covariance matrix contains the 
fluctuations of the electric field. Notice the correspondence V{Q,P^ = 712- This im- 
portant term amounts for the correlations in fluctuations and is zero for all minimum 
uncertainty states. 

Analyzing the plots we see two important behaviors. First, as a general feature 
a superposition of eigenstates of the energy (Fock states) produces a t-dependence 
in any observable, as one sees in the electric field which oscillates in time. Second, 
coherent states are the states of an harmonic oscillator system which mimic in the 
best possible way the classical motion of a particle in a quadratic potential, in this 
sense, they are the most classical states of light that one can produce. As seen 
in the plot the expectation value of the electric field oscillates classically while the 
uncertainty is minimum and coherent with the field. 
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2.B Appendix: Wigner integrals 

As it has been shown the Wigner distribution function is Gaussian whenever the 
state is Gaussian, with straightforward calculations on can deduce two extremely 
useful Gaussian integrals 



^-e-A<^2N^ ^ 



N 



-C^.A.C-fe^<^27V^ 



Vdet A ' 



N 



(2.124) 



(2.125) 



VdetA 

In the case we are dealing with non-Gaussian states the Wigner distribution func- 
tion is not any more Gaussian and one is forced to perform non-Gaussian integrals. 
We give here some very useful formulas that convert the problem of integrating 
non-Gaussian functions into a derivative problem 



crccr-e-'^"^-'^rf''^c 



„N ami f)mj arrik ,-7,1, 



(2.126) 



bj=0,bj=0,fefc=0,. 



/ 



= (-1)™^ 



+m.+m.^- ^^ d^^ a-i d-^ J.+c)^.j,.(6+c) 



Vd^tA 96^567^- 96^'= 



Extra useful integrals are 



w{Od''\ = i, 



Jmofd^'^c 



(27r)^Vdet^' 



X{v)d r] 



aN _ (471")^ ^-d^hd 



\/det7 



e T 



2.2N^ {'^T') -d^ 



{x{v)rd'''v 



e T 



IxivWd'^'v 



■v/det7 

(2vr)^ _ 
\/det7 



fej=0,bj=0,bfc=0,... 

(2.127) 



(2.128) 
(2.129) 
(2.130) 
(2.131) 



(2.132) 
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Continuous Variable formalism 



< \Eif,t)\ > 



a) 



< \^{r,t)\ > 




< \^{rJ)\ > 



e) 



< \E{f,t)\ > 



?) 




< 1^(^,01 > 



b) 



<\^ir,t)\> 



d) 




< \^if,t)\ > 



f) 



< \Eif,t)\ > 



h) 




Figure 2.4: In red the average electric field, in blue the associated uncertainty, a) Vacuum, 
b) Fock, c) Superposition, d) Coherent, e) Squeezed, f) Thermal, g) Coherent squeezed in 
position (amplitude), h) Coherent squeezed in momentum (phase). 



Chapter 3 

Quantum Cryptography 
protocols with Continuous 
Variable 



Cryptography refers to strategies which permit the secure communication between 
two distant parties (traditionally denoted by Alice and Bob) that wish to communi- 
cate secretly. So its purpose is to design new communication algorithms being sure 
that secrecy is preserved. In Classical Cryptography there is only one cryptographic 
protocol, known as the ideal Vernam cypher method, which is absolutely secure. 
The Vernam cypher consists of a random secret key (private key), shared between 
the sender (Alice) and the receiver (Bob), used to encode and decode messages with 
absolute security. However, this method suffers from two drawbacks. First, if Alice 
wants to communicate N bits to Bob, they will need to share in advance a key with 
at least N bits. Second, this key can only be used once to make the method un- 
breakable. This implies that, the key must originally be exchanged by hand before 
the communication to keep secrecy and it is essential that the key is totally random 
and secret. This problem is known as key distribution. 

To solve the problem of a private key distribution, classical strategies exist to 
distribute keys between them albeit being this distribution only partially secure. 
For example, by designing algorithms which permit distribution of private keys in a 
"practical secure" way. In such algorithms, security relies on the difficulty to invert 
some mathematical operations. Since the time needed to break the security of these 
algorithms to obtain the key is long, then practical security is achievable. 

The second problem, the necessity of a new key for each message, is also solved 
using Public Key Cryptosystems. They work as follows: assume that Alice and Bob 
possess, in advance, a common secret key. This secret key must be exchanged by 
hand once, and it has to be random and secure. Using this secret key, Alice and 
Bob can distribute among them, several private keys. Then, they could use as many 
distributed private key as necessary to encrypt/decrypt messages through e.g. the 
Vernam cypher method. In other words, any time Alice wants to communicate with 
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Bob, she only needs to use her secret key to distribute as many private keys as needed 
to encrypt later on messages. This distribution works as follows, Alice makes one 
key publicly available, referred as the public key that encodes a private key. From 
this public key any receiver could in principle extract the private key. But only Bob 
(the receiver in possession of the secret key) can extract it in an efficient way. Any 
receiver without the secret key needs to decrypt a problem with NP complexity. This 
way of distributing private keys can be done even when the secret key's length is 
much smaller than the private keys needed for the Vernam cypher encryption and 
even if the secret key is used many times, solving both issues. 

In this chapter we have studied the possibility of using Continuous Variable to 
perform quantum cryptography protocols by means of bipartite entanglement. Like 
in any practical implementation of a protocol, efficiency is an important issue since 
resources are not unlimited, thus a special attention will be devoted to the efficient 
implementation of the protocol. Before explaining how secure cryptography with 
Continuous Variable can be realized, let us introduce the basic concepts in both 
classical and quantum scenario. 

3.1 Classical Cryptography 

3.1.1 Vernam cypher 

The best and most well known classical private key (or one-time-pad) cryptosystem 
is the so-called Vernam cypher. To achieve absolute security, the Vernam cypher 
requires the prior distribution of a random classical private key, denoted as k. The 
basic steps of the protocol are the followings: 

Encoding: if Alice wants to encode a message m with the key fc, she performs 
the following operation between the message and the key, and sends the encoded 
message e to Bob 

EncA:(m) = m(B k = e. (3-1) 

Decoding: only Bob, who has also the key, can decode the message (invert the 
operation) because the key Alice has used is random. Thus, he only needs to use the 
key again to the encoded message e in order to retrieve the original message m 

Decfc(e) = Decfc[Encfc(m)] =e®k = d = m. (3.2) 

Let us illustrate Vernam cypher with an specific example. Alice wants to communi- 
cate to Bob, in a secure way, a message m (in a binary string) of e.g. 9 bits. They 
share the key k of the same size as the message (9 bits). Alice encodes her message 
by applying a XOR (exclusive Oi?) rl operation between the message m and the key 
k. 

In the next table we summarize the XOR operation 



^Also known as AND or © mod (2). 
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e 





1 








1 


1 


1 






(3.3) 



As a result Alice has the encoded message e, that will send to Bob in a public 
way. 



message 


m = 010011101 


key 


k = 110100011 


encoded message 


e = 1000111110 



Then Bob wants to readout the message, and thus, performs the inverse opera- 
tion (which is again a XOR) between the encoded message e and the key k. 

As a result Bob has the decoded message d that coincides with the message Alice 
wanted to communicate to him. 



encoded message 
key 



decoded message 



e = 1000111110 
k = 110100011 



d = 010011101 



3.1.2 Public key distribution: The RSA algorithm 

Thus far. Classical Cryptography has not a solution for the distribution of the private 
key needed to perform Vernam cypher encryption. Such distribution can, however 
be done in a public and practical secure way with the RSA algorithm. The RSA 
cryptography algorithm proposed in 1977 by ffivest, Shamir, and Adleman from the 
MIT is the most commonly used algorithm of a public key. It is widely used in bank's 
security, electronic commerce and internet, relying on the fact that to decrypt this 
algorithm one needs to solve the factorization problem which is an NP problem. 
Even now, there is no efficient classical algorithm known to solve the factorization 
problem. This means that even though computational resources increase constantly, 
one simply needs to exploit the NP character of the algorithm to make the solution 
harder to find. Let us illustrate how it works with the following example. 

i) The sender, Alice, chooses two "big" different prime numbers, say p = 61 and 
q = 53, she computes its product n = pq = 3233 and also the following quantity 

(f,= (p_l)(g_l) =3120. 

ii) She chooses a positive integer I smaller and coprime with (p, in the example 
above / = 17. 

iii) As a secret key, Alice gives to Bob the number k such that kl = 1 mod ((/>), 
take for example k = 2753. Alice makes public / and n, this is what is called a 
public key. 
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iv) With the pubhc key (/ and n) anyone can encrypt a message m and send it to 
Bob, but only Bob, who is in possession of the secret key k, is able to decrypt 
the message. This method can thus be used to perform Classical Key Distribu- 
tion. Any time Alice wants to communicate with Bob, she sends a private key 
encrypted with / and n and only Bob will be able to retrieve it. Once Bob has 
the private key, Alice can send messages to Bob via the Vernam cypher using 
this key. 

v) Encryption proceeds as follows. Alice wants to distribute a key encoded in 
a message m = 123. She uses the public key and computes the encryption 
Enc;^„(m) = m' mod (n) = e = 855. 

vi) Bob now wants to decrypt the message e to extract a private key, so he calculates 
Decfe^„(e) = DecA;,n[Enc/^n(m)] = e^ mod (n) = d = m = 123. Bob is the only 
one in possession of the secret key k and so the only one that can decrypt the 
message e to find the private key Alice is going to use with the Vernam cypher 
to communicate securely with him. 

The private key Alice and Bob share can be used more than once to distribute 
secure keys. In such way, to use the Vernam cypher, one no longer needs to share a 
long private key because we can distribute many of them in a secure way. Security 
relies in the fact that, from the encrypted message e, and the public keys / and n it is 
very difficult to find the private key k (and so m) or the original two prime numbers 
q and p, even in the case we are reusing the key k. This is because factorization is 
a NP problem, whose efficient classical solution is not known yet. Security in the 
RSA algorithm relies on the fact that independently of the computer used, if it is 
classical, the problem is NP and thus hard to solve. 

3.2 The quantum solution to the distribution of the key 

The "Quantum Computer" arises here first as a menace for Classical Key Distribu- 
tion methods and then as the solution for the security in Cryptography. Based on 
the quantum nature of the microscopic world, such "computers" , still in a theoretical 
stage, are known to be able to solve some hard mathematical problems rapidly. In 
1994 Peter Shor proposed a quantum protocol to solve the factorization problem in 
an efficient way, known as the Shor's algorithm. If such a computer can be realized, 
current cryptographic protocols will not be anymore secure. Can Quantum Mechan- 
ics then offer a solution for a secure Cryptography method? The answer is yes. 
Since the end of the 80s protocols relying on Quantum Mechanics exists permitting 
to perform Quantum Cryptography in an unconditional secure way. 

At present. Quantum Cryptography is the most important real implementation 
of Quantum Information. It offers an absolute secure distribution of random keys 
which combined with the Vernam cypher guarantees completely secure Cryptogra- 
phy. Thus, the Quantum Cryptography problem is in fact the problem of distribut- 
ing, between two distant parties, a secure random key relying on the laws of Quantum 
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Mechanics, i.e. the Quantum Key Distribution (QKD) problem. If the key is se- 
curely distributed, the algorithms used to encode and decode any message can be 
made public without compromising security. The key consists typically in a random 
sequence of bits which both, Alice and Bob, share as a string of classically correlated 
data. The superiority of Quantum Cryptography comes from the fact that the laws 
of Quantum Mechanics permit to the legitimate users (Alice and Bob) to infer if an 
eavesdropper has monitored the distribution of the key and has gained information 
about it. If this is the case, Alice and Bob will both agree in withdrawing the key 
and will start the distribution of a new one. In contrast. Classical Key Distribution, 
no matter how difficult the distribution from a technological point of view is, can 
always be intercepted by an eavesdropper without Alice and Bob realizing it. 

In Quantum Cryptography two seemingly independent main schemes exist for 
QKD. The first one, denoted as "Prepare and Measure" scheme, originally proposed 
by C.H. Bennett and G. Brassard in 1988 and known as BB84 [2l], does not use 
entangled states shared between Alice and Bob. The key is established by sending 
non-orthogonal quantum states between the parties and communicating classically 
the result of some measurements. Security is guaranteed by the quantum nature of 
the measurements which avoids each party measuring simultaneously non-commuting 
observables. The second scheme ("Entanglement based"), uses as a resource shared 
entanglement, like the one originally proposed by A. Ekert in 1991 known as Ek- 
ert91 [25]. Here entanglement is explicitly distributed and the security is guaranteed 
by the nature of quantum correlations and proved by Bell inequalities. However, 
the two schemes have been shown to be completely equivalent [26], and specifically 
entanglement stands as a precondition for any secure key distribution [27j. Let us 
briefiy detail these two schemes. 

3.2.1 "Prepare and Measure" scheme 

Like in any cryptographic protocol, there is always an eavesdropper. The protocol 
does not avoid an eavesdropper from intercepting the key, but it permits Alice and 
Bob know if the key has been intercepted, and so that it can be discarded. We sketch 
here the steps of the BB84 protocol. 

i) Alice prepares a secret sequence of random bits and encodes them in the state 
of a 2-level system e.g. a spin-1/2 system by choosing randomly between two 
bases (Z and X). Alice encodes 0/1 in |ib) (li)^.) according to basis Z (basis X). 
Then, she sends Bob the states she has prepared. For example: 
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ii) Bob receives the states without knowing on which basis have been prepared and 
measures in another random choice of bases. The outcome of the measurements 
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is going to be retained as the bits received while the state collapses in a certain 
eigenstate. 
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iii) Bob communicates to Alice his choice of bases in a public way. 

iv) Alice identifies the set of bits for which they have both performed the measure- 
ment in the same basis, i.e. outcomes 3, 4, 6, 8 and 9 in the above example. 
Alice and Bob discard the set of data in which they did not agree (the rest). 

v) Bob sends part of his data (received bits) to Alice by a public channel. Alice 
checks the correlation between the data and establishes an error rate. The error 
rate can come from an eavesdropper or noise effects. 

vi) If the error rate is too high they can assume that an eavesdropper has act 
and they can restart the protocol from the beginning. One can show that, in 
the case of free noise effect, and under individual attacks (the eavesdropper 
intercepts, measures, and resents the states) the error rate is bounded to be 
(for a sufficiently high amount of data) 25%. If Alice deduces that there is not 
an eavesdropper present, she communicates it to Bob. Alice and Bob use the 
set of remaining data as a private key. Later on, they can improve security by 
performing information reconciliation and privacy amplification on the private 
key before using it to encrypt messages with the Vernam cypher. 

Note that the security of the protocol relies in the quantum nature of the mea- 
surements. The two bases, Z and X, are associated with eigenbasis of non-commuting 
observables, a^ and ax- The eavesdropper cannot measure simultaneously both ob- 
servables on the same state. Additionally the nocloning theorem prevents her from 
being able to distinguish with certainty between non-orthogonal quantum state per- 
forming cloning, and avoids hence the possibility of resending them to Bob without 
leaving trace of her intrusion. 

3.2.2 "Entanglement based" scheme 

A second type of protocols demand as a fundamental resource, shared entanglement 
between Alice and Bob, like Ekert91. In the same way as in BB84, these protocols 
permit a secure distribution of a secret key. This can be done as far as the protocol 
ensures if there has been an interception of the key. We sketch below the steps of 
this well-known protocol. 
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i) The first step consists on distributing (along the z-direction) singlet states of a 
spin-1/2 system between Alice and Bob. Thus Alice and Bob share many copies 
of a Bell state 1^") = ^{\0)\l) - |1)|0)). 

ii) Alice and Bob are going to measure in the x — y plane in one of the three 
directions given by unit vectors Ai = (cos (;^^, sin 0^) and Bj = (cos 0^, sin 0^) 
respectively, where the azimuthal angles are fixed to (j)f = (0, 7r/4, 7r/2)j and 
to (j)? = (7r/4, 7r/2,37r/4)j. Each time they will choose the basis randomly and 
independently for each pair of incoming particles. 

iii) After the measurement has taken place, Alice and Bob can announce in public 
the directions they have chosen for each measurements and divide them into 
two separated groups. A first group for which they coincide and a second group 
for which they do not. The second group of outcomes is made public and it is 
used to establish the presence or absence of an eavesdropper. 

iv) One defines correlation coefficients to test security 

S{Ai, Bj) = V++iAi, 4) + V-^{A, Bj) - V+-iA„ Bj) - V^+iA, Bj) (3.4) 

which is the correlation coefficient of the measurements performed by Alice along 
Ai and by Bob along Bj. Here 'P±±{Ai,Bj) denotes the probability the results 
±1 has been obtained along Ai and ±1 along Bj. Straightforward calculations 
give rise to 

Thus, according to the Quantum rules £{Ai, Bj) = —AiBj = — cos 

As expected, if they choose the same orientation, Quantum Mechanics predicts 
a total anticorrelation in the outcomes £{Ai,Bj) = —1 as it should be for the 
rotational invariant singlet state |^~). 

Finally, let us define here a quantity composed of those correlation coefficients 
for which Alice and Bob have measured in different directions, 



V++{A^,Bj) = 


isin2(0f 


V^^{A,B,) = 


isin2(0f 


V+-{A,B,) = 


Icos^icPt 


V-+{A,B,) = 


lcos\4>f 



^f: 



S = \£iAi,B,) + £{A3,Bs) - £{A,,Bs) + £{As,Bi)\. (3.5) 

Again, Quantum Mechanics requires, S = 2\f2 > 2. 

The CHSH (Clauser, Home, Shimony, and Holt) inequality, is a generalization 
of Bell inequalities and asserts that 5 < 2 for any theory compatible with local 
realism. But Quantum Mechanics, and in particular with Bell states CHSH 
inequalities are violated. If this is the case, i.e. the value of S that they find 
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is exactly 2\/2, they know that their states have not been disturbed and so the 
first group of outcomes, that are random, are totally anticorrelated and can 
be converted into a secret string of bits (provided Bob flips all the bits). This 
ends the distribution of the private key. One can now, as in the BB84 protocol, 
perform information reconciliation and privacy amplification on the private key 
before using it to encrypt messages with Vernam cypher to achieve an absolute 
secure communication. 

Note that security relies in the quantum correlations i.e. entanglement and it is 
guaranteed by the violation of Bell inequalities. In contrast to BB84, Alice do not 
need in advance a string of random bits because the randomness comes from the 
measurement process. 

3.3 Quantum Key Distribution with Continuous Vari- 
able Gaussian states 

Quantum Cryptography can be implemented using systems of Continuous Variable 
i.e. using quantum states on infinite dimensional Hilbert spaces. Among all Con- 
tinuous Variable states, Gaussian states and Gaussian operations, have been the 
preferred to experimentally implement Quantum Cryptography using "Prepare and 
Measure" schemes e.g. with either squeezed or coherent states [28l ESI EQ] . Those 
schemes do not demand entanglement between the parties. Here we address the prob- 
lem of the Quantum Key Distribution with entangled Continuous Variable using an 
"Entanglement based" protocol. 

Notice that if Alice and Bob share a collection of distillable entangled states, 
they can always obtain a smaller number of maximally entangled states from which 
they can establish a secure key [31] using e.g. Ekert91 protocol. The number of 
singlets (maximally entangled states) that can be extracted from a quantum state 
using only Local Operations and Classical Communication (LOCC) is referred to as 
the Entanglement of Distillation Ed. In order to establish a key, another important 
concept is the number of secret bits Kd, that can be extracted from a quantum 
state using LOCC. As a secret bit can always be extracted from maximally entangled 
states, Kd > Ed- 

There are quantum states which cannot be distilled in spite of being entangled, 
i.e., they have Ed = 0. These systems are usually referred to as bound entangled 
states since its entanglement is bound to the state. Nevertheless, for some of those 
states it has been shown that Kd t^ and thus, they can be used to establish a 
secret key [32]. 

A particular case of states that cannot be distilled by "normal" procedures are 
Continuous Variable Gaussian states, e.g., coherent, squeezed and thermal states 
of light. By "normal" procedures we mean operations that preserve the Gaussian 
character of the state (Gaussian operations), they correspond e.g. to beam splitters, 
phase shifts, mirrors, squeezers, etc. Thus, in the Gaussian scenario all entangled 
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Gaussian states posses bound entanglement. Navascues et al [33] have shown that it 
is also possible using only Gaussian operations to extract a secret key a la EkertOl 
from entangled Gaussian states, in spite the fact that these states are not distill- 
able. In other words, it has been proven that in the Gaussian scenario all entangled 
Gaussian states fulfill GKo > (where the letter G stands for Gaussian) while 
GEd = 0. 

The above result implies that in principle any entangled Gaussian state can be 
used for implementing Quantum Cryptography. However, any real implementation 
should address the optimization of the resources needed i.e. the efficiency of the 
protocol. The proposed protocol presented in |33] suffers precisely from an efficiency 
problem because the success probability of the protocol is vanishingly small. Here 
we will study the consequences of relaxing the protocol to a more realistic scenario 
preserving the security. 

3.3.1 Distributing bits from Gaussian states by digitalizing output 
measurements 

Extracting bits from discrete variables systems can be easily implemented by mea- 
suring for example spin observables and associating the up/down orientation, in a 
fixed axis, as the bit 0/1. In this sense we are digitalizing the output measurements 
on states. If one uses many copies of a bipartite entangled state it is possible to dis- 
tribute among two separated parties a pair of bit strings. Such strings of bits possess 
in general a degree of correlations due to the entanglement present in the state. In 
the CV scenario and in particular with Gaussian states, the outcome measurements 
(of canonical variables) fill the continuum, and one needs to digitalize the results in 
some way. Before proceeding further we detail how to extract correlated string of 
bits from entangled Gaussian states. 



We consider a bipartite CV system of two bosonic modes, A and B (see Fig. 3.1 ). 
Quadratures on each mode can be efficiently measured by standard homodyne detec- 
tion. The probability that measuring the position quadrature xa in mode A results 
in an outcome xa with uncertainty a is given by 

Va{xa) = tr[pA^ixA)], (3.6) 

where a{xA) is a single-mode Gaussian (squeezed) state with first moments {xyi,0} 
and covariance matrix diagjcr^, l/o"^}. In a similar way we define Vb{xb) for mode 
B. The probability distribution associated to a joint measurement of the quadratures 
XA and XB, is given by Vab{xa,xb) = tT[pAB{cF{xA) ® a{xB))]- 

We digitalize the obtained outputs by assigning the bits +(— ) or 0(1) to the 
positive (negative) values of the measured quadratures. This digitalization transforms 
each joint quadrature measurement into a pair of classical bits. Let us adopt a 
compact notation by denoting Vj^ = Va{'M^a\), and "P^^ = 'Pyi_B(±|xA|,=F|2;_B|). 
The probability that at a given string index the bits of the corresponding two modes 
coincide is given by VJ^ = {'^ab + '^ab)I E{a=±,/3=±} '^AB- Correspondingly the 
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^^ 



ali 



probability that they differ is V^^ = {VJ^ + 'PAB)IT.{a=±,p=±}'^AB- Trivially, 
'^AB + '^AB ~ ^- ^^ '^AB > '^AB ^^^ measurement outcomes display correlations, 



otherwise they display anticorrelations. Notice that, if the two modes are completely 



uncorrelated, "P^^ = V 



AB 



1/2. 



Alice 



Bob 




Figure 3.1: Alice and Bob 1x1 mode Gaussian state. The volume below the green zone 
denotes the probability for positive outcomes measurements of the x quadrature and the 
orange zone for the negatives outcomes. We have considered the global state with zero 
displacement vector. 



3.3.2 Efficient Quantum Key Distribution using entanglement 

It has been noticed that the degree of bit correlations are strongly related with the 
entanglement present in the states used to distribute the pair of strings of classical 
bits. We ask ourselves which is the possibility that Alice and Bob distribute total 
correlated strings of bits (a key) in a secure and efficient way by means of bipartite 
entangled Gaussian states. 

The most general scenario we consider is that the state that Alice and Bob 
share is mixed, letting thus the possibility that an eavesdropper (Eve) has access 
to some degrees of freedom entangled with Alice and Bob before their distribution. 
In this general scenario, as the state of Alice and Bob is mixed it always admit a 



purification (see lemma 2.5.3). Thus, any mixed Gaussian state of 2 modes can be 
expressed as the reduction of a pure Gaussian state of 4 modes in such a way that 
the bipartite mixed Gaussian state (Alice and Bob) can be obtained after tracing 
out the 2 other modes (Eve). For what follows it is also important the fact that any 
NPPT Gaussian state oi N x M can be mapped by Gaussian Local Operations and 
Classical Communication (GLOCC) to an NPPT symmetric state of 1 x 1 modes 
i.e. preserving the amount of entanglement. Finally, for 1 x A^ Gaussian states 
NPPT and entanglement are equivalent concepts. By virtue of the above properties 
of Gaussian states, it is sufficient to consider the case in which Alice and Bob share 
many copies of a quantum system of 1 x 1 modes symmetric mixed NPPT Gaussian 
state pAB- 

While the states that Alice and Bob share correspond to the reduction of a pure 4- 
mode state, Eve has access to an entangled reduction of two modes. We consider two 
types of attacks (i) individual (or incoherent) attacks, where Eve performs individual 
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measurements, possibly non-Gaussian, over her set of states and (ii) finite coherent 
(or collective) attacks, where Eve waits until the distribution has been performed 
and, decides which collective measurement gives her more information on the final 
key 

We define the error probability as the probability that at a given string index 
the bits of the corresponding two modes differ i.e. eab = 'T-^ab- Having fixed a 
string of M classical correlated bits, Alice and Bob can apply Classical Advantage 
Distillation [M] to establish a secret key. To this aim, Alice generates a random bit 
h and encodes her string of M classical bits (6a) into a vector h of length M such 
that hAi + bi = b mod (2). The vector b is made public. Bob checks that for his bits 
all results bsi + bi = b' mod (2) are consistent, and in this case accepts the bit b as 
the first bit of the secret key. The new error probability is given by [35] 

which tends to zero for sufficiently large M. 

Security with respect to individual attacks from the eavesdropper Eve, can be 
established if |35] 

X M 

'^"^ ^ <Ke++|e__)r, (3.8) 



where \e±±) denotes the state of Eve once Alice and Bob have projected their states 
onto I ± |xoa|,±|xob|). 

Notice that it is favorable for Alice and Bob to have a high degree of success {^ab 
small) while Eve can gain information if the overlap between her states after Alice 

and Bob have measured coincident results (|(e++|e )|) is sufficiently small. The 

above inequalities come from the fact that in the case of individual attacks the error 
on Eve's estimation of the final bit b is bound from below by a term proportional to 
|(e+-|-|e__)| [35]. Therefore, Alice and Bob can establish a key if 

'^^ <Ke++|e__)|. (3.9) 



1 -eAB 

In 135 it was shown that any 1x1 NPPT Gaussian state fulfills the above 
inequality and thus any NPPT Gaussian state can be used to establish a secure key 
in front of individual eavesdropper attacks. If we assume that Eve performs more 
powerful attacks, namely finite coherent attacks, then security is only guaranteed if 
the much more restrictive condition 

-^^i^<|(e++|e__)|2, (3.10) 

1 - CAB 

is fulfilled. This new inequality is violated by some NPPT states. Notice that this 
implies that the analyzed protocol is not good for these states in this more general 
scenario. Nevertheless, using the recent techniques of [36], one can find states for 
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which the presented protocol ahows to extract common bits also secure against this 
attack. 

The analyzed protocol [33], results in an inefficient success since it relies on an 
exact matching between Alice and Bob outputs as a requirement for security. Notice 
that since security relies on the fact that Alice and Bob have better correlations than 
the information the eavesdropper can learn about their state, perfect correlation is 
not a requirement to establish a secure key. We look for a constructive method to im- 
prove efficiency without compromising security. By denoting Alice's outputs by xqa, 
we calculate which are the outputs xqb Bob can accept so that the correlation estab- 
lished between Alice and Bob can still be used to extract a secret bit. Specifically, we 
relax the differences between their output quadrature measurements but imposing 
correlations in the sign of their quadratures i.e. we keep correlations in the sign of 
their output quadratures irrespectively of their numerical value. We thus demand 
that Alice and Bob associates the bits (+/-) or 0/1 to the positive (negative) value 
of their respective outcome measurement on each run. Alice will announce publicly 
the modulus of her outcome measurement each time. We study the efficiency and 
the security of the protocol if Bob accepts only outcomes measurements that lie in 
the nearest of Alice's outcomes such that security is guaranteed. Furthermore we 
analyze the performance of the protocol in terms of the entanglement sharing. 

We use the standard form of a bipartite 1x1 mode mixed Gaussian state, (see 



lemma 2.5.2) for the states shared between Alice and Bob 
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(3.11) 



where, without loss of generality, we flip the sign of Cp 

Cx ^ |cp| > (we fix also the displacement vector to 0). 

with mixed symmetric (as said above being totally general) and so Aa = A;, = A > 1. 

The positivity condition, see lemma 2.5.2, reads (A — c^KA + c„) > 1, while the 



and adopt the convention 
For simplicity we can deal 



Cx)(A + Cp) > 

entanglement NPPT condition, see lemma 2.6.3 is given by (A — Cx)(A — Cp) < 1. 
We impose that the global state including Eve is pure (she has access to all degrees 
of freedom outside Alice an Bob) while the mixed symmetric state, shared by Alice 



and Bob is just its reduction (see lemma 2.5.3), thus 
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(3.14) 
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where 



X 



\/a + 6 + \/a — h 



Y 



\/ a + h — \/a — b 



and a = X^ — CxCp — 1,6 = X{cx — Cp). 

Performing a measurement with uncertainty a, the probabihty that Ahce finds 
±1x0^1 while Bob finds ib|xo_B|, is given by the overlap between the state of Alice and 
Bob, PAB, and a pure product state pA,i®PB,j (with i, j = 0, 1) of Gaussians centered 
at ±|xoa| and ib|a;o_B| respectively with a width (notice pAfl ^ | + |2;oa|)(+|2;oa||) 
which gives 



'^AB,a = T^AB^a = ^ApAB{pAfi ® pB,o) 



{27, f / d\ABWpj,,{CAB)y^p^,,^ps.o{C 



AB) 



K{a) exp 



2|a:oA||xoB|ca; - (A + cr^)(x^^ + x^^' 
(A + a2)2-ci 



for the probability that their symbols do coincide and. 



(3.15) 



'PAB,<r = 'PAB,a = K{a)e^p 



-2\xoa\\xob\cx - (A + o-^)(a:^A + xg^) 



for the probability that they do not coincide, where 



Their error probability for o" — )■ reads 

^-^^=1^0^^^.-=,^^^pA..|.o.||.o.| 



(3.16) 



(3.17) 



(3.18) 



Let us calculate the bipartite state of Eve \e±±) after they have mesured (Alice has 
projected onto | ± |xoa|) and Bob onto | ± |xo_b|)) 
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where A 



/a+b 



B 



Axn 



Fob I 



|xoa| and 5xq = \xqb\ + |a^0A|- The 



overlap between the two states of Eve, which gives a direct quantification of the 
distinguishability, is given by 



Ke++|e- 



det(^^±±±i 



exp 



A2-c; 



_^-(d— d++)^( ^^^ j^__ )(d— d++) 






1)A + IxoaI^obI {cx - Cp{\^ - cl)) 



3.211 



Substituting Eqs. (3.18) and (3.21) into (3.9) one can check, after some algebra, that 



the last inequality reduces to 



^OA + Xi - 



Mj(A2 



lU 



\xoa\\xob\ 



Cp{X^ 



cD) < 0. 



(3.22) 



Notice that condition (3.22 ) imposes both, restrictions on the parameters defining 



the state {\,Cx,Cp), and on the outcomes of the measurements {xqa,xob)- The 
constraints on the state parameters are equivalent to demand that the state is NPPT 
and satisfies 



iX-Cx){X + Cx)> 1. 



(3.23) 



Nevertheless, as Cx > Cp, any positive state fulfills this condition. Hence for any 
NPPT symmetric state, there exists, for a given xqa, a range of values of xqb such 



that secret bits can be extracted (Eq. (3.9) is fulfilled) efficiently. This range is given 
by 



Axo = \xob\ - \xoa\ e Sc 



a 



where 
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A 



Cx + X 



l-iX + Cx)iX + Cp) 
1 - (A-c^)(A-Cp) 



\xoa\ 



(3.24) 



(3.25) 



After Alice communicates |xoa| to Bob (the signs obtained are kept in secret), he 
will accept only measurement outputs within the above interval Axq. The interval is 



well defined if a > 1, which equals to fulfill Eq. (3.23). Notice also that the interval 



is not symmetric around \xqa\ because the probabilities calculated in Eqs. (3.15) 



and (3.16) do depend on this value in a non-symmetric way. The length Da of the 



interval of valid measurements outputs for Bob is given by 



Dn 



4\/a 



a 



\xoa\ 



(3.26) 
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It can be observed that maximal Da — )• oo (a = 1) corresponds to the case when 
Ahce and Bob share a pure state (Eve is disentangled from the system) and thus 



condition (3.9) is always fulfilled. On the other hand, any mixed NPPT symmetric 
state (a > 1) admits a finite D^. This ensures a finite efficiency on establishing a 
secure secret key in front of individual attacks. 

If we assume that Eve performs more powerful attacks, namely finite coherent 
attacks, then security is only guaranteed if 



eAB 



1 -eAB 



< 



e__ 



(3.27) 



This condition is more restrictive than (3.9). With a similar calculation as before we 



obtain that now security is not guaranteed for all mixed entangled symmetric NPPT 
states, but only for those that also satisfy 



A-(A + c^.)(A-c^)(A-Cp) >0. 



(3.28) 



For such states, and given a measurement result xqa of Alice, Bob will only accept 
outputs within the range 



Axo = \xob\ - \xoa\ e S/3 



-VP-i'VP-i 
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where 
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2A(A2 



1) 



A - (A + Ca;)(A - Cx){X - Cp) 



> 1. 



(3.29) 



(3.30) 



As before, /3 > 1 is fulfilled by conditions (3.23) and (3.28) 



Let us now focus on the efficiency issue. We define the efficiency E{jab) of the 
protocol for a given state ^ab, as the average probability (over the range of secure 
outcomes, S) of obtaining a classically correlated bit. Explicitly, 

Ei'jAB) = dxoAdxoB{l-eAB)tT^{PAB\xoA,XoB){xoA,XoB\)- (3.31) 

The marginal distribution in phase-space is easily computed by integrating the cor- 
responding Wigner function in momentum space 



tr{pAB\xoA, xqb) {xoA, Xob\) 



/ / dpAfipB^VpABiCAB) 



exp 



2c3:XoAXoB-A(xg^+a§g) 



vr^ 



(3.32) 



but the final expression of Eq. (3.31) has to be calculated numerically. Note that 



if Alice and Bob share as a resource M identical states (NPPT state for individual 
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attacks, and NPPT fulfilling condition (3.28) for finite coherent attacks), the number 
of classically correlated bits that can be extracted from them is ~ M x E{'^ab)- The 



efficiency Eq. (3.31 ) increases with increasing D. In particular, for the protocol given 

for any state. 

with the entanglement of the 



in [33], D = 0, and therefore E{-jab) 

We investigate now the dependence of £"(7^5) 
NPPT mixed symmetric state used for the protocol as well as with the purity of the 
state. In order to fix one parameter of the states we fix the energy of the states at 
a fixed value (A cte). As a measure of the entanglement between Alice and Bob, see 



(2.97), we compute the logarithmic negativity 



LN(7ab) = -log2[min(/2_,l)] - log2[min(/i+, 1)] = logg 



\/(A-c^)(A-Cp) 



>0. 



(3.33) 



because /2+ > 1 and 1 > /i_ = y^(A — c^)(A — Cp). 




Figure 3.2: Protocol efficiency (quantified by E) versus the entanglement measured by 
logarithmic negativity LN. The shading from cyan to red corresponds to purity from zero 
to one. 



In Fig. 3.2, we display the efficiency of the protocol (assuming individual attacks) 



versus entanglement shared between Alice and Bob for different states jab- There 
is not a one-to-one correspondence between efficiency and entanglement, since states 
with the same entanglement can have different purity, which can lead to different 



efficiency. This is so because there are two favorable scenarios to fulfill Eq. (3.9). The 



first one is to demand large correlations so that the relative error sab of Alice and 
Bob is small. The second scenario happens when Alice and Bob share a state with 
high purity, i.e., Eve is very disentangled. In this case, independently of the error 



eAB, Eq. (3.9) can be fulfilled more easily. Despite the fact that efficiency generally 



increases with increasing entanglement and increasing purity, this enhancement, as 
depicted in the figure, is a complex function of the parameters involved. Nevertheless, 
one can see that there exist an entanglement threshold (around LN ~ 0.2) below 
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which the protocol efficiency diminishes drastically no matter how mixed are the 
states shared between Alice and Bob. 

It is also illustrative to examine the dependence of a (which determines the 
interval length Da) on the entanglement of the states shared by Alice and Bob. 




Figure 3.3: Entanglement of the states shared between Alice and Bob measured in terms 
of the logarithmic negativity LN as a function of the parameter a under individual attacks. 
The shading from cyan to red corresponds to purity from zero to one. 



In Fig. 3.3 we plot the logarithmic negativity of a given state versus the param- 



eter a. States with the same entanglement but different purity are associated to 
quite different values of a, specially for states with low entanglement (high purity). 
Nevertheless states with high entanglement permit a large interval length (small a) 
and, thus, high efficiency. 



In both, Fig. 3.2 and Fig. 3.3, we have observed that states with different en- 
tanglement give the same efficiency. However it is important to point out that to 
extract the key's bits. Classical Advantage Distillation |34j stills needs to be per- 
formed. The efficiency of Maurer's protocol, strongly increases with decreasing e^s, 
and, therefore, the states with higher entanglement will provide a higher key rate. 



3.4 Conclusions 



Efficiency is a key issue for any experimental implementation of Quantum Cryptog- 
raphy since available resources are not unlimited. In this chapter, we have shown 
that the sharing of entangled Gaussian variables and the use of only Gaussian op- 
erations permits efficient Quantum Key Distribution against individual and finite 
coherent attacks. 

We have used the fact that all mixed NPPT symmetric states can be used to 
extract secret bits to design an algorithm, that efficiently succeeds for a secure ex- 
traction of a key. Whereas under individual attacks all mixed NPPT symmetric 
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states admit a finite efficiency, for finite coherent attacks an additional condition 
constrains the parameters of the states. We have introduced a figure of merit (the 
efficiency E) to quantify the number of classical correlated bits that can be used 
to distill a key from a sample of M entangled states. We have observed that this 
quantity grows with the entanglement shared between Alice and Bob. This relation 
it is not one-to-one due to the fact that states with less entanglement but with more 
purity (eavesdropper more disentangled) can be equally efficient. Nevertheless we 
have point out that, these states would be inefficient, when performing the Classical 
Advantage Distillation of the key. 



Chapter 4 

Byzantine agreement problem 
with Continuous Variable 

4.1 Introduction 

One of the aims of Quantum Information is to provide new protocols and algorithms 
(set of rules for solving a problem in a finite number of steps) which exploit quantum 
resources to find a solution to problems which either lack a solution using classical 
resources or the solution is extremely hard to implement. In this chapter we analyze 
a multipartite protocol, the Byzantine agreement problem, by means of multipartite 
Gaussian entanglement. 

The term "Byzantine Agreement" was originally coined by Lamport and Fischer 
|37j in the context of computer science to analyze the problem of fault tolerance 
when a faulty processor is sending inconsistent information to other processors. In 
a cryptographic context, it refers to distributed protocols in which some of the par- 
ticipants might have malicious intentions and could try to sabotage the distributed 
protocol inducing the honest parties to take contradictory actions between them. 
This problem is often reformulated in terms of a Byzantine army where there is a 
general commander who sends the order of attacking or retreating to each one of his 
lieutenants. Those can also communicate pairwise to reach a common decision con- 
cerning attacking or retreating, knowing that there might be traitors among them 
including the general commander. A traitor could create fake messages to achieve 
that different parts of the army attack while other retreat, which would put the 
army at a great disadvantage. The question hence is whether there exists a proto- 
col among all the officials involved that, after its termination, satisfies the following 
conditions: The commanding general sends an order to his A^ — 1 lieutenants such 
that: (i) All loyal lieutenants obey the same order, (ii) If the commanding general 
is loyal, then every loyal lieutenant obeys the order he sends. It is assumed that the 
parties cannot share any previous setup. 

Lamport et al |,38j proved that if the participants only shared pairwise secure 
classical channels, then Byzantine Agreement or broadcast is only possible iff t < n/3 
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where n is the number of players and t the number of traitors among them. In [39] 
Fitzi and co-workers introduced a weaker nevertheless important version of Byzantine 
Agreement known as detectable broadcast. Detectable broadcast is said to be achieved 
if the protocol satisfies the following conditions: (i) If no player is corrupted, then the 
protocol achieves broadcast and (ii) If one or more players are corrupted, then either 
the protocol achieves Byzantine Agreement or all honest players abort the protocol. 
Thus, in a detectable broadcast protocol, cheaters can force the protocol to abort, 
i.e. no action is taken. In such cases all honest players agree on aborting the protocol 
so that contradictory actions between the honest players are avoided. In the same 
paper |39j, Fitzi, Gisin and Maurer devised a solution to the detectable broadcast 
problem using multipartite entanglement as a quantum resource. Later on Fitzi et 
al [in] and Iblisdir and Gisin [41j showed that a Quantum Key Distribution (QKD) 
protocol, which guarantees a private sequences of classical data shared between pairs 
of parties, suffices to solve detectable broadcast. This situation is reminiscent of 
quantum cryptography, in which two seemingly independent main schemes exist for 
QKD, the prepare-and-measure BB84 scheme [21] which does not use entangled 
states shared between Alice and Bob, and the Ekert91 scheme j25j where indeed 
entanglement is explicitly distributed and the security is guaranteed by the violations 
of Bell inequalities. However, the two schemes have been shown to be completely 
equivalent [26] , and specifically entanglement stands as a precondition for any secure 
key distribution |27j . 

Detectable broadcast might be regarded in a similar view as Quantum Key Distri- 
bution and, arguably, the same reasoning applies to the different protocols advanced 
for its solution, making explicit or implicit use of multipartite entanglement. In 
this paper, we adopt an approach a la EkertDl, guided by the physical motivation 
of studying the performance and the usefulness of multipartite entangled states as 
operational resources to achieve detectable broadcast. While protocols for this task 
exist for qutrits [39] and qubits |42| H3] , in this paper we investigate the possibil- 
ity of solving detectable broadcast with Continuous Variable (CV) systems, namely 
with Gaussian states and performing Gaussian operations only. The motivations 
for this approach are manifold. On the practical side, the recent progresses in CV 
QKD [H] has shown that the use of efficient homodyne detectors, compared to 
photon counters employed in BB84 schemes, enables the distribution of secret keys 
at faster rates over increasingly long distances |45| I46j . On the theoretical side, 
multipartite entanglement is a central concept whose understanding and characteri- 
zation (especially in high-dimensional and CV systems), despite recent efforts, is far 
from being complete. It is important, therefore, to approach this task operationally^ 
i.e. by connecting entanglement to the success or to the performance of diverse 
quantum information and communication tasks [42j ; while exploiting the differences 
between discrete-variable and continuous-variable scenarios. For Gaussian states of 
light fields, which are presently the theoretical and experimental pillars of Quan- 
tum Information with CVs [38], an important result in this respect is due to van 
Loock and Braunstein ^49j. They introduced a scheme to produce fully symmetric 
(permutation-invariant) n-mode Gaussian states exhibiting genuine multipartite en- 
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tanglement. Furthermore, they devised a communication protocol, the "quantum 
teleportation network", for the distribution of quantum states exploiting such re- 
sources, which has been experimentally demonstrated for n = 3 [50]. The optimal 
fidelity characterizing the performance of such a protocol yields an operational quan- 
tification of genuine multipartite entanglement in symmetric Gaussian states. This 
quantification is equivalent to the information-theoretic "residual contangle" mea- 
sure, a Gaussian entanglement monotone, emerging from the monogamy of quantum 
correlations |5 H I52 | . Other applications of multipartite Gaussian entanglement have 
been advanced and demonstrated, and the reader may find more details in [6l I48j . 
as well as in the two more recent complementary reviews [9] (theoretical) and [53j 
(experimental) . 

We have proposed a novel protocol to solve detectable broadcast with symmet- 
ric multimode entangled Gaussian states and homodyne detection. This provides 
an alternative interpretation of multipartite Gaussian entanglement as a resource 
enabling this kind of secure communication. We concentrate on the case of three 
parties, and remarkably find that not all three-mode symmetric entangled Gaus- 
sian states are useful to achieve a solution: to solve detectable broadcast there is a 
minimum threshold in the multipartite entanglement. This is at variance with the 
two-party QKD counterpart: in there, all two- mode entangled Gaussian states are 
useful to obtain a secure key using Gaussian operations [33] . We eventually discuss 
how our protocol can be implemented in realistic conditions, namely considering 
detectors with finite efficiency and yielding not perfectly matched measurement out- 
comes, and Gaussian resources which are not ideally pure, but possibly (as it is in 
reality) affected by a certain amount of thermal noise. We show that under these 
premises the protocol is still efficiently applicable to provide a robust solution to 
detectable broadcast over a broad range of the involved parameters (noise, entangle- 
ment, measurement outcomes and uncertainties), paving the way towards a possible 
experimental demonstration in a quantum optical setting. 

4.2 Detectable broadcast protocol 

The protocols to solve detectable broadcast, in the discrete scenario, using entangle- 
ment as a resource are based on three differentiated steps: 

i) Distribution of the quantum states. 

ii) Test of the distributed states. 

iii) Protocol by itself. 

Step iii) is fundamentally classical, since it uses the outputs of the different measure- 
ments of the quantum states to simulate a particular random generator ("primitive"). 
Let us consider the simplest case, in which only three parties are involve and at most 
one traitor is allowed, for which no classical solution exists. The parties are tradition- 
ally denoted by S (the sender, i.e. commander general) and the receivers Rq and Ri 
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(i.e. lieutenants), and at most, only one is a traitor. In this case, the primitive gener- 
ates for every invocation a random permutation of the elements {0, 1, 2} with uniform 
distribution, i.e. (ts, *%, *Ri) G {(0, 1, 2), (0, 2, 1), (1, 0, 2), (1, 2, 0), (2, 0, 1), (2, 1, 0)}. 
In this primitive, no single player n can learn more about the permutation than the 
value tn {n = {S,Ro,Ri}) which she/he obtain i.e., each player ignores how the 
other two values are assigned to the other two players. Furthermore, nobody else 
(besides the parties) have access to the sequences. 

Entanglement is used in the protocol to distribute classical private random vari- 
ables with a specific correlation between the players, in such a way that any malicious 
manipulation of the data can be detected by all honest parties allowing them to abort 
the protocol. In the discrete variable case such a primitive can be implemented with 
qutrits using e.g. Aharonov states |^) = -igdO, 1,2) + |1,2,0) + |2,0, 1) - |0,2,1) - 
|1,0, 2) — |2,1,0)). This choice allows the distribution and test part to be secure 
|39j . Whenever the three qutrits are all measured in the same basis, all the three 
results are different. Hence -after discarding all the states used for the testing of 
the distributed states (step ii))- the players are left with a sequence of outputs that 
reproduces the desired primitive. We schematically represent this primitive by the 
table below 
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After accomplishin g th e distribution and test part of the protocol (steps i) and ii)) 
detailed in section 4.4, the sender S will broadcast a bit 6 G {0,1} (0 = "attack", 
1 = "retreat" ) to the two receivers using the mentioned distributed and tested prim- 
itive and classical secure channels. 

Following [39j the broadcast (step iii)) proceeds as follows: 
iii-1) We denote by bi the bits received by -Rj, i = 0, 1 (notice that if the sender is 
malicious, the broadcasts bits bi could be different). Each receiver Ri demands to 
S to send him the indices j for which S got the result bi (on the primitive). Each 
player Ri receives a set of indices Jj . 

iii-2) Each Ri test consistency of his own data, i.e. checks weather his output on 
the set of indices he receives (Jj) are all of them different from 6j. If so the data is 
consistent and he settles his flag to Ci = bi, otherwise his flag is settled to Cj =_L. 
iii-3) -Ro and Ri send their flags to each other. If both flags agree, the protocol 
terminates with all honest participants agreeing on b. 

iii-4) If Ci =_L, then player Ri knows that S is dishonest, the other player is honest 
and accepts his flag. 

iii-5) If both Rq and Ri claim to have consistent data but cq 7^ ci, player Ri demands 
from Rq to send him all the indices k € Jq for which Rq has the results 1 — cq. -Ri 
checks now that (i) all indices k from Rq are not in Ji and (ii) the output -Ri obtains 
from indices k correspond to the value 2. If this is the case, Ri concludes that -Rq 
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is honest and changes his flag to cq. If not, Ri knows that Rq is dishonest and he 
keeps his flag to ci. Detectable broadcast is in this way achieved. 

4.3 Continuous variable primitive 

We first review briefly the basic tools needed to describe multipartite Gaussian states 
and measurements. Building on the ideas presented in the previous section, we 
construct a protocol adapted to the Continuous Variable case. 

To achieve the primitive presented in the CV set up we consider quantum systems 
of 3 canonical degrees of freedom, i.e. 3 modes (one for each player), associated to a 
Hilbert space Ti = £^(M^). Following the discussion of the protocol (step iii)) for the 
implementation of the primitive in the discrete case, we choose to use as a resource 
a pure, fully inseparable tripartite Caussian state, completely symmetric under the 
interchange of the modes |l9] . 

In contrast to the bipartite case where one kind of entanglement exist, the tri- 
partite case is much richer [53] and offers several classes of entanglement. In |55l a 
classification for Gaussian states, in terms of the non-positivity of the partial trans- 
pose across several bipartite partitions (NPPT criterium), was studied. Namely for 
tripartite Gaussian states described by a covariance matrix 7, 5 classes of states can 
be distinguished. 

i) Class 1 (Fully inseparable states or genuine entangled) iff 

ObiOI + i J ^ 0, 
OciOl + i J ^ 0. 

ii) Class 2 (One-mode biseparable) iff 

BaOj + i^ > 0, 
Oj-iOj + i J ^ 0, 
OklOl + i^ ^ 0, 

any permutation of modes (i, j, k) must be considered, 
iii) Class 3 (Two-mode biseparable) iff 

OaOf + i J > 0, 
Oj-iO'^ + ij^ > 0, 

Okiel + i J ^ 0, 

any permutation of modes (i, j, k) must be considered. 
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iv) Class 4 (Three-mode biseparable or bound entanglement) 
or Class 5 (Fully separable) iff 

OclOl + i J > 0, 

with J = ©1=1 J ■ The condition for full inseparability (truly multipartite entangle- 
ment) across the 1x1x1 mode partition can be rewritten and reads as 7 + ij7A ^ 0, 
7 + i Jb ^ 0, 7 + i Jc ^ with Ja = J'^ ®J ®J, analogously for B and C. 

A tripartite Gaussian state with such properties (pure, fully inseparable, com- 
pletely symmetric under the interchange of the modes) with covariance matrix 7(a) 
accepts the following parametrization [55 j 



7(a) 



1 " 





c 





c 


\ 





h 





— c 





— c 


c 





a 





c 








— c 





b 





— c 


c 





c 





a 





\o 


— c 





— c 





h 1 



(4.1) 



with a > 1 and 



J(5a- V9a2-8), 
= -(a- V9a2 - 8). 



(4.2) 
(4.3) 



It follows that 7(a) is fully inseparable as soon as a > 1. Quantitatively, the genuine 



tripartite entanglement of the states of (4.1), as measured by the residual contangle 
[52], is a monotonically increasing function of a and diverges for a — )• cx). 

So far 7(a) appears as the "equivalent" CV version of the discrete Aharonov 
state 1^), i.e. pure, fully inseparable and completely symmetric under exchange of 
the 3 players. One is tempted to infer, therefore, that the discussed primitive of the 
discrete case can be straightforwardly generalized to the continuous one. A standard 
way of transforming the correlations of the shared entangled quantum states pa 
into a sequence of classically correlated data between the 3 players is to perform 
a homodyne measurement of the quadratures of each mode. Denoting by xs, xr^, 
xr^ the position (or momentum) operator of each mode, and by xs, xrq, xr^ the 
output of the respective measurements, the players after quadrature measurement 
on their modes end up with classical correlated data according to the entanglement 
sharing. In order to proceed with the classical part of the protocol (step iii)) one 
need to digitalize the outcome measurements into trit correlated data. A standard 
way to proceed is the following, the 3 players communicate classically with each 
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other and agree, for instance, only on those outcome values for which either \xs\ = 
\xrq\ = \xrj^\ = {0,xq} with xq > 0. In this way each player can associate the 
logical trit (t = 0,1,2) to a positive, negative or null result respectively, willing to 
map the quadrature correlations into trit correlations. To verify the success of such 
procedure we define the probability distribution that measuring the quadratures xs, 
xrq, xr-^ an outcome ts = j, Ir^ = k, tn^ = I is produced with uncertainty a, being 
(j, k, I) G {0, 1, 2}. Such probability is given by 

V{j,Kl) = tr;5P''>p,= (4.4) 

= (2^)" [ wj^^^'^'H^Wam^^c 



Here p^' ' = Ps~'' ® Pr° ^ Pr^ describes the separable state of the 3 modes 
obtained after each party has measured its corresponding quadrature and obtained 
an output j, k, I. Thus, the state pa of the system after the measure can be described 
by a fully separable covariance matrix 

a^ \ fa^ \ fa^ 



^" - V 1/aV V 1/^7 V 1/^' 

(where each party has a pure one mode Gaussian state) and by a displacement vector 
dl = if^%\xo\,0) e if^%\xo\,0) e (/f2>o|,0) being flk,i = (±1/0, ±1/0, ±1/0) 
where {±1/ — 1/0} corresponds to the trit values {0/1/2}. On the other hand Wa 
is the Wigner function of the initial tripartite entangled state pa described by the 
covariance matrix 7(a) and displacement vector d (to be fixed). 

Since Gaussian states are symmetric with respect to their displacement vector, 
and quadrature output measurements fill the continuum, it is easy to see that a 
mapping into classical trits such that all possible outputs {0,1,2} occur with the 
same and non-vanishing probability is not possible. Therefore, the primitive dis- 
cussed in the discrete case has to be modified when adapted to the CV scenario. 
The way we find to overcome this asymmetry of the output's probabilities relies on 
joining the correlations from pairs of quantum states. First we map the quantum 
correlations involved in each single quantum state just to classical bits by a "sign 
binning" (as in CV QKD f33|). That is, first we keep only the results for which the 
3 players obtain a coincident output \xs\ = \xRg\ = \xr-^\ = xq > 0, and associate 
the logical bit bn = 0(1), where n = {S, Ro, Ri}, to positive (negative) value of the 
coincident quadrature +xo{—xq). In every measurement the sender makes public 
his outcome result xq, whatever the output is (in each run the sender will obtain a 
different outcome result), but not its sign. In this step, all states are used in the pro- 



tocol (we will relax the "idealization" of coincident outputs in section 4.6). Second 
we construct an appropriate primitive consisting of a random permutation of the 
elements {i,j, k) G {(0, 1, 1), (1,0, 1), (1, 1,0)}. Compulsory for the implementation 
of the primitive is that every element of the primitive appears with equal proba- 
bility and any other combination of the outputs not regarded by the primitive is 
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exceedingly small compared to the allowed permutations, hi other words, denoting 
hy p = V{0, 1, 1) = 7^(1, 0, 1) = V{1, 1, 0), and, denoting by 5i = V{else), we require 
that the corresponding conditional probabilities. 



'P{bs,bR^,hR^] 



'P{bs,bRo,bR^) 



0. 



fulfill j> — ?■ 3 and 6i 

If the above conditions are met, it is possible then by invoking two consecutive 



times the previous generator {i.e. using a pair of quantum states of the class (4.1)), 



to map pairs of bit values to trit values (0,1,2) plus an additional undesired element 
"m". For instance, the players, after keeping only those bits obtained by coincident 
quadrature outputs ±xo, use two consecutive bits m and m + 1 for the following 
association 



(1,0) 


^0 


(0,1) 


-^ 1 


(1,1) 


^2 


(0,0) 


-^ u 



Thus, by concatenating two invocations and using the above association, one gen- 
erates the permutations corresponding to the primitive {(0, 1, 2), (0, 2, 1), (1,0, 2), 
(1, 2,0), (2,0, 1), (2, 1,0)} plus a permutation of the undesired element "u" i.e. (u, 2,2) 
(2, u, 2) and (2, 2, u) which will be discarded during the protocol. With all these tools 
at hand, optimal results for the desired probabilities are achieved for a displacement 
vector of the form (f = —^(1,0, 1,0, 1,0), and yield 



Si 



7'(l,l,l) = C(a,a)exp(-^^ 

P(0,0,1)=P(0,1,0)=P(1,0,0) 

-ixl (a'^ + 1 1 5a - V9a2 
C{a, a) exp 



(4.5) 



K1K2 



and 



P(0,1,1)=P(1,0,1 
C(a,.)exp(-^| 



P(1,1,0) 



(4.6) 
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with coefficients Ki = a"^ + ^ 
pre-factor 



3a - V9a2 _ g 



,K2 = a^ + l 



3a + \/9a2 - 8 



, and 



C{a,a) 



det 



7M + 7(«) 



(a - c + ^2) (5 + c + ^) ^(a + 2c + ^2) (6 - 2c + ^) 

The probabihty distribution depends on the parameters a, xq and a. In the case 
a ^ 1, it can be seen that the conditional probabilities satisfy the following 



P=l-lk + 0{e), k 



0, 



(4.7) 



with k = exp ["qC^)^] • In the limit of a perfect, zero-uncertainty homodyne detec- 
tion (cr ^ 0), p converges exactly to 1/3. In general, there exists a l arge region in 
the parameters space for which p — )• ^ and 5i — >■ 0, as depicted in Fig. 



4.1 




Figure 4.1: Plot of the conditional probability p as a function of the measurement outcome 
Xq and the shared entanglement a, for pure symmetric tripartite Gaussian resource states. 
Detectable broadcast is ideally solvable in the huge, unbounded region of xq ^ 0, a >• 1, 
where p — >■ 1/3. The entanglement threshold a = athrosh — 5^2/6 is depicted as well 
(wireframe surface). All the quantities plotted are adimensional. 



However, there is a lower bound on the entanglement content of the symmet- 
ric Gaussian states of (4.1) in order to fulfill the above conditions. Only for a > 
Othresh = q- ~ 1.18, One has that p > Si, which is a necessary condition to im- 
plement the primitive. This indicates that not all pure 3-mode symmetric fully en- 
tangled Gaussian states can be successfully employed to solve detectable broadcast 
via our protocol. This entanglement threshold is an a priori bound which does not 
depend on the specific form of the employed resource states. For any parametriza- 
tion of the covariance matrix of pa, which is obtainable from 7(a) by local unitary 
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squeezing transformations (hence at fixed amount of tripartite entanglement), tlie 
same condition discriminating useful resource states is analytically recovered. We 
remark that this bound becomes tight in the limit xo — ?• oo, meaning that a > athresh 
becomes necessary and sufficient for the successful implementation of the primitive. 

4.4 Distribution and test 

We move now to the distribution and test part of the protocol which represents the 
first step in the execution of the appropriate primitive and has only two possible 
outputs: global success or global failure. In the case of failure, a player assumes that 
something went wrong during the execution of the protocol and aborts any further 
action. In the case of global success, each of the parties ends up with a set {K} of 
classical data, and the protocol proceeds classically, according to the steps explained 
in section |421 

From now on we assume that the players share pairwise secure classical channels 
and secure (noiseless) quantum channels. The secure distribution and test part uses 
correlations to validate the fairness of the other parties. Therefore, quantum states 
are sent through noiseless quantum channels and measures are performed massively. 
In doing so, it is possible to detect manipulation of the data on a statistical basis 
and abort the protocol if necessary. In this section we mostly focus on the issue of 
security in the distribution and security test of the data. This should permit the 
detection of any malicious manipulation of the data. The explicit effects of sabotage 



actions will be reported in section 4.5 We postpone the important issue of how well 
the protocol will succeed in the case that the outputs of the measurements are not 
perfectly correlated considering the efficiency issue while asserting security, as well 
as the realistic practical implementation considering noise in the preparation of the 
states to section l46l 

The distribution and test part proceeds as follows: 
i-1) Without loosing generality, let us assume that Ri prepares a large number, M, 
of tripartite systems in state pa (^-e. with covariance matrix 7(a) and displacement 
d) and sends one subsystem to S and another to Rq. 

i-2) Ri wants to check if the distribution of states is faithfully achieved. To this aim 
she/he chooses randomly a set of indices for player S, {Ks}, and a disjoint set of 
indices for player Rq, {Kr^}, and sends these two sets over secure classical channels 
to the corresponding players. Player S sends his/her Ks subsystems to player Rq. 
For each m G {Ks}, Rq measures the two subsystems in his/her possession and Ri 
measures his subsystem. After communication of their results over secure classical 
channels, they agree on those indices {Ks} C {Ks} for which \xr^\ = \xji^\ = xq. 
Ri and Rq check now whether the correlations predicted by the primitive occur: 
p = p(Oll) = P(lOl) = P(llO) = l,6i = 0. If the test was successful, i.e. if the 
measurement results were consistent with the assumption that the states have been 
distributed correctly, the players i £ {Ro,Ri} set the fiag /j = 1, otherwise fi = 0. 
In an analogous way, the test is performed for S. 
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i-3) Players S, Rq and Ri send their flags to each other. Every player who receives 
a flag "0", sets his flag also to "0". Every player with flag "0" aborts the proto- 
col. Otherwise the execution of the protocol proceeds. This step terminates the 
distribution and test of the quantum systems. 

In the second phase of the protocol a selection of the distributed systems is 
chosen to establish the bit sequences which will be used to implement the quantum 
primitive. In this phase, again honest parties may abort the protocol if malicious 
manipulations occur. 

ii-1) The players S, Rq and Ri agree upon a set of systems which have not been 
discarded during the distribution and test part. 

ii-2) Player S chooses (randomly) two disjoint sets of subsystems labeled by indices 
L^g C M. He/she sends the set L^ to player i and demands player i to send via a 
noiseless quantum channel his/her subsystems m G Ug to him/her. In each case, the 
(random) choice L\ is secret to party j, i.e. player Ri has no information whatsoever 
about the set L^". An analogous procedure is adopted by Rq and Ri. 

ii-3) After measuring their whole sequence of subsystems, player i £ {S,Ro, Ri} 
announces publicly, the set of indices {M™} G Mi for which the output of the 
quadrature measurement was |xo|. The order in which the players announce their 
measurement results can be specified initially and based e.g. on a rotation princi- 
ple. (Notice that the announcement of \xi\ = xq during the actual measurement 
phase would make possible an effective traitor strategy, since he could manipulate 
combinations on a systematic basis). 

ii-4) Without loss of generality, let us explicitly describe this step of protocol for 
player S. From the following sets if' n M^^ =: U^' and L^^ n Mf^ =: C/|^« let 
Ug' C Ug'' for i G {0,1} be the index set for which the player S measured itxo 
twice. Analogously to the first phase of the protocol, player S can test if the outputs 
of his measures agree with the correlations of a proper primitive ('P(OO) = 'P(IO) = 
P(01) = 1/3 and P(ll) = 0) If the test is successful, the player sets his flag fs = 1, 
otherwise fs = 0. The same procedure is analogously performed by Rq and Ri. 
From this step on, the players deal exclusively with the outputs of their measures, 
i.e. classical data and secure classical channels. 

ii-5) S checks correlation on his outputs in the following set M := Mg^OM'^^ nM]^ C 
Mg^. If the test is successful, S sets his flag /s = 1, otherwise fs = 0. Rq and Ri 
do the equivalent step. 

ii-6): From a randomly chosen set V^ C M player S demands from Ro and i?i their 
measurement results. S tests this control sample for the assumed primitive. If the 
test is successful, S sets his flag fs = 1, otherwise fs = 0. Rq (Ri) perform this step 
with a set V^'^> C M\V^ {V^^ C M\{V^ U y^")) respectively. 
ii-7) Every player with a flag aborts the execution of the protocol. Otherwise the 
players agree upon a set W := M\{V U V^" U V^'^) as the result of the invocation 
of the primitive, which consists in an even number of elements. This step concludes 
the distribution part of the protocol. 
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4.5 Primitive: Errors and manipulations 



We analyze here the effects of mahcious manipulations of the data by dishonest 
parties and its detection by the honest ones. We examine here two possible sources 
of error, which can occur during the implementation of the primitive with Gaussian 
states. While the first source is inherent to the system, the second is caused by an 
active adversary intervention of a participating party. The inherent error is caused 
by the occurrence of non-consistent combinations on the invocation of the primitive, 
that is, the occurrence of outputs (1,1,1), (0,0,0), (0,0,1), (0,1,0) and (1,0,0) 
has to be considered. This error will propagate along the protocol, so that the 
probability of finding a combination which is not appropriate is bounded from above 
from rj = 1 — (3p)^. 

The second source of errors we want to discuss here corresponds to the local 
actions that one of the players could do in order to manipulate the measurement 
results of other players. For instance, let us assume that the player Rq has malicious 
intentions and wants to shift the local component of the displacement vector of 
the distributed state using local transformations. Please note that a shift of the 
quadrature output xq, provides the same error in the probability distribution of the 
outputs as a shift in the corresponding displacement vector. In other words, both 
types of manipulations produce the same change in the probabilities as calculated 
in Eq. (4.4). Parameterizing the shift in the displacement vector by the parameter 
A, cP" I—;- {d'Y^ = — ^(1, 0, 1, 0, A, 0), it is interesting to see how that affects the 
conditional probabilities p and 5i. If probabilities were changed, player Rq could 
try to determine (via subsequent communication with the other players (step ii-3))), 
with certain probability, the occurrence of the outputs of the other players, thereby 
gaining additional information. Notice also that S and Ri cannot realize the local 
manipulation of Rq without classical communication between them. This can be 
trivially seen by realizing that the partial trace tr/jy(/5a(7, d')) = j WcdxpiQdppi^ = 
>V^(75,/?i,d5,i?i) = trKo(^a(7>'^)) with 
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Thus the most plausible strategy for a traitor could consist on the following: (i) 
discrediting honest players by manipulating the displacement vector in such a way 
that non-consistent combinations appear, (ii) hide successful measurements to the 
honest players which result in combinations that might be disadvantageous. It is 
tedious but straightforward to show that by making use of the test steps ii-4)-ii-6) 
honest parties can detect the effects of such manipulations. 
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4.6 Efficient realistic implementation 



In this section we focus on the efficiency of the proposed protocol and we extend our 
results to a realistic practical scenario, relaxing the conditions for the obtention of 
correlated outputs between the players and assuming noise in the preparation of the 
input states. 

The protocol, as discussed in the previous sections, constitutes a nice proof-of- 
principle of the fact that detectable broadcast is solvable in the CV scenario using 
multipartite Gaussian entanglement. However, it suffers from its reliance on two 
main idealizations which render the practical implementation of the primitive unre- 
alistic, or, better said, endowed with zero efficiency. Specifically, we have requested 
that (i) a pure tripartite symmetric Gaussian state is distributed as the entangled 
resource; and (ii) when the three parties measure (via homodyne detection) the po- 
sition of their respective modes, their measurement is taken to be ideal, that is not 
affected by any uncertainty, and moreover all parties have to obtain, up to a sign, the 
same outcome xq. In reality, assumption (i) is unjustified as inevitable imperfections 
and losses result instead in the production of mixed thermalized states; on the other 
hand, the probability associated to measurements under assumption (ii), and hence 
the probability of achieving broadcast, is vanishingly small [Ij. It is interesting, in 
view of potential practical implementations of our scheme, to study here how its 
success is affected, and possibly guaranteed, by relaxing the above two assumptions. 



To deal with (i), let us recall that the tripartite entangled Gaussian states of (4.1 ) 
can be produced in principle by letting three independently squeezed beams (one in 
momentum, and two in position) interfere at a double beam-splitter, or "fritter" 
|56j . as proposed by van Loock and Braunstein [3H]- In practice, the parametric 
non-linear process employed to squeeze the vacuum is affected by losses which result 
in the actual generation of squeezed thermal states in each single mode. Before the 
tritter, one then has three independent Gaussian modes with covariance matrices 
Yi^{s,n) = diagjns, n/s}, 72^(5, n) = 73^(5, n) = diag{n/s, ns}, respectively, where 
s = exp(2r) (with r the squeezing degree in each single mode) and n > 1 is the 
noise parameter affecting each mode. The noise n is related to the initial marginal 
purity "P™ of each single mode by n = 1/Vj^, and corresponds to a mean number of 
thermal photons given by n**^ = (n — l)/2. For n = 1, each mode is in the ideally 
pure squeezed vacuum state. After the tritter operation, described by the symplectic 
matrix [Ml [561 [57] 
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the output covariance matrix of the three modes is given precisely by 

7°"* = Sut ■ h'Tis, n) e 7^(5, n) j}^{s, n)] • S^t = nj{a), (4.9) 



where 7(a) is defined in (4.1 ) and we have made the identification a = (s + 2)/(3s). 
Eq. (4.9) describes generally mixed, fully symmetric three-mode Gaussian states, 
with global purity given by "P = n~^, thus reducing to the pure instance of (4.1) 



for n = V = 1. Recall that any additional losses due e.g. to an imperfect fritter 
and/or to the distribution and transmission of the three beams can be embedded 



into the initial single-mode noise factor n, so that (4.9) provides a realistic descrip- 
tion of the states produced in experiments [50l EH] ■ We therefore consider this more 
general family of Gaussian states as resources to implement the CV version of the 
primitive. It may be interesting to recall that also for the general family of states 



of (4.9) the genuine tripartite entanglement is exactly computable [57J in terms of 



the residual contangle [52], and as expected, it increases with a and decreases with n. 

Concerning the idealization (ii) discussed above, for an efficient implementation 
we should first of all consider the realistic case of non-ideal homodyne detections, 
which means that the outcomes are affected by uncertainties quantified by the pa- 



rameter a, see (4.4). Furthermore, we should let the parties measure within a finite 
range, which means specifically that in each measurement run the expected values for 
the measurement outcomes of the receivers can be shifted of some quantity A with 
respect to the corresponding expectation value of the sender's homodyne detection. 
So, what we should ask for is that the parties (one sender S and two receivers Rq and 
Ri) agree on those outcomes of their measurement results for which \xs\ = xq > 
and |xi?Q|,|xRj = (xq + A) > 0, once the sender has announced his/her output 
results xq to the other two parties. 

Here, the actual results of each measurement are assumed to distribute according 
to a Gaussian function centered at xq (for the sender) and xo + A (for the receivers), 
respectively, with a variance a. Now the associated events occur with a finite proba- 
bility. We wish to investigate for which range of the positive shift A E [Amin, Amax], 
being Amax — Amin the range, the conditional probability p still approaches 1/3. 
The wider such range, the higher the probability of success, or efficiency, of the pro- 
tocol; of course the regions in the space of parameters such that the primitive can 
be efficiently implemented will depend on the specific boundaries Amin and Amax 
and not only on their difference. Notice than in order to ensure that the sign of 
the quadratures does not change when allowing a finite range of valid output values 
(and therefore, correlations between classical bits are properly extracted (see section 



4.3)), we always demand the shift A to be positive. 

This condition can be further relaxed allowing for a non-symmetric range of per- 
mitted values around the broadcasted value xq but constraining only the absolute 
value of the shift as |Ajnin| < xq, ensuring that the sign of the correlations remains 
unchanged. This extra condition, which could be straightforwardly included in our 
expressions if one aims at maximizing the efficiency of our protocol, does not modify 
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the analysis of the realistic implementation of the protocol we perform in this section. 
For the sake of clarity, we remark once again the role of the parameter A: allowing 
a non-zero shift A in the computation of the probability p, means considering the 
realistic case in which the outcomes of the measurements performed by each receiver 
can be not coincident with each other, and not coincident even with the correspond- 
ing broadcasted value of xq. In what if follows we show that the protocol can be run 
successfully provided that the deviations \xRg\ — \xs\ and |xijj — \xs\ (in each run) 
both lie in between a Amin and a Amax, which will be determined in the following. 



To this aim, we can perform an analysis similar to the one of section 4.3, but 
considering in full generality a non-unit noise factor n, a non-zero uncertainty a, 
and a non-zero shift A. The calculations of the probabilities follow straightforwardly 
along the lines of the special (unrealistic) case previously discussed, obtaining 

4(A + XQ)\AUiT'^+7a-3R\ + UrT'^+3a+R']xQ] 



P 



_4{ _ 



ixQ\4(a-R)A+(4cr'^+9a~5R'\xQ] 32(A+XQ)\A(a^+a\ + (<y^+R\xQ] ^ "1 

_|_ g 9n{4iT'^+9acr'^-RtT'^+4) _j_ „ 9n(4cr^ + 9arT'^ -Rtr'^+i) I fA IQ") 



with R = VSa^ — 8. We find that in the parameter space of a (regulating the entan- 
glement), n (regulating the mixedness), xq (regulating the measurement outcome), 
a (regulating the measurement uncertainty) and A (regulating the measurement 
shift), there exists a surface which acts as the boundary for the regime in which our 
primitive can be faithfully implemented, yielding a feasible, robust solution to the 
broadcast problem. This surface is obtained by requiring that p = 1/3 — e, with the 



deficit e chosen arbitrarily small. The result is plotted in Fig. 4.2 for e = 10""^ in the 
three-dimensional space of parameters xo/\/ra, A/-^/n, and a, for different values of 
a. 

We consider the primitive as efficiently implementable in the whole region such 



that 1/3 — e<p< 1/3, which spans the volume above the surface of Fig. 4.2 Notice 
that for o" = 0, n = 1, and Amax — ^ Amin — ^ 0, such an useful volume shrinks to 
a two-dimensional slice (with a > 5v2/6) which represents the parameter range in 



which the "ideal" implementation described in section 4.3 is successful. 

The figure offers several reading keys. Let us investigate independently how the 
possibility of solving detectable broadcast via our protocol depends on the individual 
parameters. For simplicity, we will consider n fixed and eventually discuss its role. 
We will also for the moment keep the idealization of error-free homodyne measure- 



ments (o" = 0), corresponding to Fig. 4.2 a) which makes the subsequent discussion 



more tractable. However we will relax such an assumption in the end to show that 
a realistic description of the homodyne measurement does not significantly affect 
the performance and the applicability of the protocol. This validates the claims of 
efficiency that we make in the following. 
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Xo/\/n 




Figure 4.2: Plots, in the space of xo/y/n (quadrature measurement normalized to noise), 
A/y'n (measurement shift normalized to noise), and a (shared entanglement), of the bound- 
ary to the useful region for which p = 1/3 — e (e = 10^^), at different values of the homodyne 
detection uncertainty (a) cr = (ideal error-free measurement), (b) a = 1 (fixed error, in- 
dependent of the outcome), and (c) a = ccq/IO (proportional error, corresponding to a 90% 
efficiency in the detectors) . Detectable broadcast can be solved efficiently, by means of our 
protocol, for all values of the parameters which lie above the depicted surface. See text for 
an extended discussion. All the quantities plotted are adimensional. 



4.6.1 Entanglement role 



Let us henceforth start with the dependence of the solution on o. Somehow surpris- 
ingly, there exist lower and upper bounds on the tripartite entanglement such that 
only for amin < a < timax the protocol achieves a solution. The bounds naturally de- 
pend on xq and A. Specifically, we observe that Omin diverges for A = and xq — )• 0, 
meaning that no feasible solution can be achieved in the low-A, Iow-xq regime; the 
reason being that near xq = there is not possibility of associating the classical bits 
"0" and "1" to positive/negative values of the quadratures. The lower bound then 
goes down reducing to the already devised threshold of athrcsh = 5\/2/6 for A close 
to zero and xq » 0, and eventually converges to a = 1 (i.e. all entangled states are 
useful) for any finite xq ^» and A — )• oo. On the other hand, the upper bound 
on a, which surprisingly rules out states with too much entanglement, is obviously 
diverging at A = but becomes finite and relevant in the regime of small xq and 
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large A, eventually reducing to 3/2 for any finite xq and A — )■ oo. 

Summarizing, the two extremal regimes corresponding to A = on one hand 
and A ^ oo on the other hand, both allow a solution of detectable broadcast via 
our protocol: the main difference is that in the former case one needs states with 
an entanglement above Omin = 5\/2/6, while in the latter case one needs states 
whose entanglement is below Omax = 3/2. The regime of finite shift A interpolates 
between these two limits. This means, in terms of useful range, and hence of effi- 
cient implementations, that if one is able to produce entangled states precisely with 
5\/2/6 < a < 3/2, the protocol is implementable with high efficiency for any shift 
A G [0,oo) in the measurement outcomes, i.e. with an infinite range of variability 
allowed for the acceptable data resulting from homodyne detections performed by 
the receivers, for a given outcome xq of the sender. This information is important 
in view of practical implementations, and becomes especially valuable since the en- 
gineering of the required entangled resources appears feasible: a squeezing between 
4, 5 and 6 dB is required in each single mode, which is currently achieved in optical 
experiments [SSI EOl EI] ■ 

4.6.2 Measurement outcomes role 



For a fixed entangled resource, a. Fig. |4.2[ a) alternatively, shows that there exist 
minimum thresholds both for xq and A in order to achieve a solution to detectable 
broadcast. While the useful range for xq is always unbounded from above, we find 
that, interestingly, an upper bound Amax exists for a > 3/2. Precisely, for a given 
a > 3/2, with increasing xq we observe that Amin decreases and Amax increases, i.e. 
the useful range spanned by A widens. Conversely, at a given xq, Amax decreases 
with increasing entanglement a, reducing the parameter space in which a solution 
can be found. Consistently with the previous discussion, we conclude again that 
in realistic conditions (A > 0) it is better to have a moderate amount of shared 
entanglement to solve broadcast with optimal chances. 

4.6.3 Thermal noise role 

Now, let us note that the noise parameter n simply induces a rescaling of both xq 
and A, in such a way that with increasing n the surface bounding the useful range 
of parameters shrinks, as it could be guessed (the noise degrades the performance 
of the protocol). Still, with typical noise factors characterizing experimental imple- 
mentations, e.g. n = 2, the protocol appears very robust and the solution is still 
achievable, for a given amount of entanglement (say a < 3/2), provided that xq and 
A exceed \/2 times their respective minimum thresholds obtained for ideally pure 
resources (n = 1). 

4.6.4 Homodyne efficiency role 

Finally, let us address the important issue of the uncertainty affecting homodyne 
detections. Any realistic measurement is characterized by a non-zero a. We have 
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explicitly studied two situations, one in which the absolute error is fixed, correspond- 
ing to a constant a (see Fig. |4.2[ b) ) , and another in which the relative error is fixed 
to 10%, corresponding to a cr proportional to the measurement outcome xq (see 
Fig. |4.2[ c)). The result is that, in both cases, for not exceedingly high values of the 
error factor, the useful region is obviously reduced but, crucially, the possibility of 
achieving detectable broadcast via our protocol is still guaranteed in a broad range 
of values of the parameters. Specifically, as somehow expected, the error model in 
which a is proportional to the measurement outcome results in a more consistent 
modification (shrinkage) of the useful surface, while almost nothing happens in the 
case of fixed, small a. In particular, upper bounds on xq arise for a practical realiza- 
tion in presence of a proportional error, or in other words due to a limited efficiency 
in the detection. A significant portion of the parameter space anyway remains valid 
for a workable implementation of the primitive. Our scheme is thus robust also with 
respect to the imperfections in the quadrature measurements. We draw the conclu- 
sion that the protocol we designed is truly efficient and realistically implementable 
in non-ideal conditions. 

We explicitly depicts p, (4.10), for sensible resource values of a = 3/2 and n = 2, 



as a function of xq and A, and according to different values of a like in Fig. 4.2 




Figure 4.3: Plots of the conditional probability p as a function of the measurement out- 
come Xq for the sender and the shift A of the measurement outcomes for the receivers, for 
realistically mixed Gaussian resource states with n = 2 and a = 3/2. The uncertainty in 
the homodyne detection is taken to be (a) cr = 0, (b) cr = 1, and (c) a = xq/1Q. Detectable 
broadcast is efficiently solvable in the wide plateau region where p — ^ 1/3. All the quantities 
plotted are adimensional. 



We notice a huge (unbounded from above in the ideal case o" = 0) region (see 
1/3, yielding an efficient solution to detectable broadcast 



Fig. 4.3) in which p 
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via our protocol. We have thus identified an optimal "work-point" in terms of the 
parameters describing the shared Gaussian states, and we have defined the frontiers 
of application of our scheme in the laboratory practice. In this way, together with 
the explicit steps of the protocol presented in the previous sections, we obtain a 
clear-cut recipe for a CV demonstration of detectable broadcast, that we hope it can 
be experimentally implemented in the near future. 

For the sake of completeness, let us mention that from (4.10[) we analytically find 



that p converges exactly to 1/3 only in the following limiting cases (for a given finite 
n and a = 0): (i) a — )• cxd with A < 3xo; (ii) xq — >• oo with a > 5\/2/6; (iii) A — t- oo 
with 1 < a < 3/2. 

4.7 Conclusions 

We have proposed in this chapter a protocol to solve detectable broadcast with entan- 
gled Continuous Variable using Gaussian states and Gaussian operations only. Our 
algorithm relies on genuine multipartite entanglement distributed among the three 
parties, which specifically have to share two copies of a three-mode fully symmet- 
ric Gaussian state. Interestingly, we have found that nevertheless not all entangled 
symmetric Gaussian states can be used to achieve a solution to detectable broadcast: 
a minimum threshold exists on the required amount of multipartite entanglement. 
We have moreover analyzed in detail the security of the protocol. 

In its ideal formulation, our protocol requires that the parties share pure resource 
states, and that the outcomes of homodyne detections are perfectly coincident and 
not aff^ected by any uncertainty; this however entails that our protocol achieves a 
solution with vanishing probability. To overcome such a practical limitation, we 
have eventually considered a more realistic situation in which the tripartite Gaus- 
sian resources are affected by thermal noise, and, more importantly, the homodyne 
detections are realistically imperfect, and there is a finite range of allowed values 
for the measurement outcomes obtained by the parties. We have thoroughly inves- 
tigated the possibility to solve detectable broadcast via our protocol under these 
relaxed conditions. 

As a result, we have demonstrated that there exists a broad region in the space 
of the relevant parameters (noise, entanglement, range of the measurement shift, 
measurement uncertainty) in which the protocol admits an efficient solution. This 
region encompasses amounts of the required resources which appear attainable with 
the current optical technology (with a legitimate trade-off between squeezing and 
losses). We can thus conclude that a feasible, robust implementation of our proto- 
col to solve detectable broadcast with entangled Gaussian states may be in reach. 
This would represent another important demonstration of the usefulness of genuine 
multipartite Continuous Variable entanglement for communication tasks, coming to 
join the recent achievement of a quantum teleportation network |50j . 
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Chapter 5 

Classical versus Quantum 
correlations in Continuous 
Variable 

5.1 Introduction 

In the previous chapters via a digitahzation procedure we have been able to distill 
classical correlations from entangled Gaussian states in such a way that we have been 
able to implement protocols for either cryptographic or detectable broadcast purpose. 
In this chapter we want to relate the performance on extracting classical correlations 
from entangled states to the quantum correlations embedded in the states. While 
Gaussian states (coherent, squeezed, and thermal states) have been originally the 
preferred resources for both theoretical and practical implementations, a new fron- 
tier emerges with non-Gaussian states (Fock states, macroscopic superposition like 
Schrodinger's cat states, etc.). The latter can be highly non-classical, possess in 
general "more entanglement" than Gaussian states [62], and allow to overcome some 
limitations of the Gaussian framework like entanglement distillation [63l IMj [T6] and 
universal quantum computation |65j . Therefore, it is of central relevance to pro- 
vide proper ways to quantify also non-Gaussian entanglement in an experimental 
approachable way. 

At a fundamental level, the difficulty in the investigation of entanglement (quan- 
tum correlations) can be traced back to the subtle task of distinguishing it from 
classical correlations [66] . Correlations can be regarded as classical if they can be 
induced onto the subsystems solely by local operations and classical communication, 
necessarily resulting in a mixed state. On the other hand, if a pure quantum state 
displays correlations between the subsystems they are of genuinely quantum nature 
(entanglement). We adopt here a pragmatic approach: if two systems are in toto 
correlated, then this correlation has to be retrieved between the outcomes of some 
local measurements performed on them. In this chapter, therefore, we investigate 
quadrature correlations in Continuous Variable (CV) states. We are also motivated 
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by the experimental adequacy: field quadratures can be efficiently measured by ho- 
modyne detection, without the need for complete state tomography. Specifically, we 
study optimal correlations in bit strings obtained by digitalizing the outcomes of 
joint quadrature measurements on a bipartite two-mode CV system. 

5.2 Quadrature measurements and bit correlations. 

To study bipartite CV systems we use the well known fact that any NPPT Gaussian 
state of A^ X M modes can be mapped by Gaussian Local Operations and Clas- 
sical Communication (GLOCC) to an NPPT symmetric state of 1 x 1 modes i.e. 
preserving the amount of entanglement. Then, for the most general scenario it is 
sufficient to consider a bipartite CV system of two bosonic modes, A and B. The 
probability distribution associated to a single /joint measurement of arbitrary rotated 
quadratures xa{0) and xb{^) providing outcomes x^ and x^, is given by 

Va{x'a) = tr[pAU^^aixA)Ug\ (5.1) 

VABix^x"^^) = ti[pAB{Ue^ U^){^{xa) a{xB)){U^^ U^^)] = 
= tr[(t//^ ® U^^)pab{U^ U^){Hxa) ® Hxb))] = 

= tl[pAB(.HA)^Hx'^B))]=^4PABi^i^A)^HxB))], (5.2) 

where o'^xa) is a single-mode Gaussian (squeezed) state with first moments {x/i,0} 
and covariance matrix diag{o"^, l/o"^}. Here Uq is a unitary operator describing a 
rotation of 9 on mode A, corresponding to a symplectic transformation given by 

Se A = { ■ /I ^ I • Likewise for B. Thus, one can either measure the rotated 

y— sm cos a J 

quadrature (x^, x'g) on the state (passive view) or antirotate the state {Pa^) and 
measure the unrotated quadrature (active view). 

To digitalize the obtained output quadrature measurements that spread in a 
continuum we assign the bits -|- (— ) to the positive (negative) values of the measured 
quadrature. This digitalization transforms each joint quadrature measurement into 
a pair of classical bits. A string of such correlated bits can be used e.g. to distill a 
quantum key [331 1]- Let us adopt a compact notation by denoting (at given angles 
9, if) Vj^ = Va{'^\x\\), and Vj^ = Vab{'MA\t^\^^b\)- "^^^ conditional probability 
that the bits of the corresponding two modes coincide is given by "PJ^ = {'P\'^ + 
^ab)I Z]|a=± B=±\ ^AB- Correspondingly, the probability that they differ is P^^ = 

{Kb + nt)/ E{a=±,/3=±} K%- Trivially, VJ^, + V% = 1. If VJ^ > Pj^ the 
measurement outcomes display correlations, otherwise they display anticorrelations. 
Notice that, if the two modes are completely uncorrelated, V^^ = V"^^ = 1/2. For 
convenience, we normalize the degree of bit correlations as 

bUx'aI, |xg|) = 2\r2B - 1/2| = irjB - vt^l (5-3) 
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so that for a completely uncorrelated state S(|x}^|, \x^\) = 0. The interpretation of 



(5.3 ) in terms of correlations is meaningful if a fairness condition is satisfied: locally, 
on each single mode, the marginal probabilities associated to the outcomes "+" or 
"— " must be the same: V^ = V^, V^ = V]^ otherwise, (5.3) can systematically 



display false correlations due to individual unbiasedness. 

For a two- mode CV system, whose state is described by a Wigner function W, 
we define the "bit quadrature correlations" Q as the maximal average probability 
of obtaining a pair of classically correlated bit (in the limit of zero uncertainty) 
optimized over all possible choices of local quadratures 

Q{p) = sup f f dx'Adx%Wix%x%)[lhnBmx%\x%\)], (5.4) 

where VV(rc^,x'g) = f f dp^^dp^W{x^j^^,p^^,x^,p^) is the marginal Wigner distribu- 
tion of the (rotated) positions, and {x^,p^,x'^,p'^} = [Sq (B S^]{xa,Pa,xb,Pb}- 
We demonstrate numerically (for all clases of Gaussian and non-Gaussian states 



discussed) that we can write Eq. (5.4) as 



Q(p) =sup|ii;^''^(p)| =sup| / f dx\dxlW{x'A,xl)sgu[x\xl)l (5.5) 

where E^'^^{p) = f f dx^j^dx'^W {x^^, x'^)sgn{x^^x'^) is the "sign-binned" quadrature 
correlation function, which has been employed, e.g., in proposed tests of Bell in- 
equalities violation for CV systems. 

A homodyne Bell test requires measuring two different rotated quadratures per 
mode, to achieve violation of the bound [SZlEHllMlEn] |S^''^+^^'5+£;^''^-Sj5'| < 
2. Here, we propose to measure a single quadrature per mode, which displays one- 
shot optimal correlations, unveiling a powerful quantitative connection with Gaus- 
sian and non-Gaussian entanglement measured through negativity. While this form 



is more suitable for an analytic evaluation on specific examples, the definition (5.4) 
is useful to prove the general properties of Q [^ that we analyze here. 

Lemma 5.2.1 Normalization: < Q{p) < 1. 

Proof. It follows from the definition of Q{p), as both B and the marginal Wigner 
distribution range between and 1. D 

Lemma 5.2.2 Zero on product states: Q{pA '^ Pb) = 0. 

Proof. For a product state the probabilities factorize i.e. V^^ = VJJ^^ and so 
V^Q = T^AB' ^^fi'^c ^e have used the fairness condition. Namely B = 0, hence the 



integral in (5.4) trivially vanishes. D 



^Fair states have necessarily zero first moments, which can be assumed without loss of generality. 



In general, one could take in (5.4 1 the difference between B computed on p and B computed on 



pA® pB- The latter is zero on fair states. 



82 Classical versus Quantum correlations in Continuous Variable 



Lemma 5.2.3 Local symplectic invariance: Let Ua,b be a unitary operator amount- 
ing to a single-mode symplectic operation Sa,b on the local phase-space of mode A, B. 

Then Q[{IJa ® Ub)p{U\ ® U^)] = Q{p). 

Proof. Any single-mode symplectic operation S can he decomposed in terms of 



local rotations and local squeezings (Euler decomposition). By definition (5.4) is 
invariant under local rotations, so we need to show that local squeezing transforma- 
tions, described by symplectic matrices of the form Sr = diag{l/r, r}, also leave Q{p) 
invariant, i.e. Q[{Uf-^U^)p{Us ^Uf )] = Q{p)- Adopting the passive view, the ac- 
tion of local squeezings on the covariance matrix of each Gaussian state d'{xA,B) is ir- 
relevant, as we take eventually the limit cr — )• 0. The first moments are transformed as 
dA,B "-^ S~f dA,B, so that B'^^{\xa\, \xb\) ^-^ ^ab^H^^M^ \txB\)- On the other hand, 
the Wigner distribution is transformed as W(^) i— )• W[(5'7"'^ ® S^ )0]- Summing up, 
local squeezings transform S, = {xa,PA,xb,Pb} into ^s,t = {sxA,PA/s,txB,PB/t}- 



As (5.4) involves integration over the four phase- space variables d'^S,, we change the 
variables noting that d^^ = d'^^s,t, to conclude the proof. D 



It follows from lemmas 5.2.1 and 5.2.2 that if Q > 0, then the state necessarily 



possesses correlations between the two modes, lemma 5.2.3[ moreover, suggests that 
Q embodies not only a qualitative criterion, but might be interpreted as bona fide 
operational quantifier of CV correlations. We will now show that this is the case for 
various important classes of states. 

First, we apply our procedure to Gaussian states (GS), finding that bit quadra- 
ture correlations provide a clear-cut quantification of the total correlations between 
the two modes. They are monotonic with the entanglement on pure states, and can 
be arbitrarily large on mixed states, the latter possibly containing arbitrarily strong 
additional classical correlations. We then address non-Gaussian states (NGS), for 
which the exact detection of entanglement generally involves measurements of high- 
order moments |71| . The underlying idea is that for NGS obtained by de-gaussifying 
an initial pure GS and/or by mixing it with a totally uncorrelated state, our mea- 
sure based entirely on second moment is still expected to be a (quantitative) witness 
of the quantum part of correlations only, i.e. entanglement. We show that this is 
indeed the case for relevant NGS including photonic Bell states, photon-subtracted 
states, and mixtures of Gaussian states. Notably, the complete entanglement pic- 
ture in a recently demonstrated coherent single-photon-subtracted state [72] via a 
de-gaussification procedure is precisely reproduced here in terms of quadrature cor- 
relations only. Our results render non-Gaussian entanglement significantly more 
accessible in a direct, practical fashion. 

5.3 Gaussian states 

Even though entanglement of GS is already efficiently accessible via their covariance 
matrix, we use such states as "test-beds" for understanding the role of Q in discrim- 
inating CV correlations. The covariance matrix 7 of any two-mode GS p can be 
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written in standard form as 

^( A C\ A = Xah, B = Aa2, 
^ V C"^ ^ y ' C = diagK,-Cp}, 

where, without loss of generality, again we flip the sign of Cp and adopt the convention 
Cx > \cp\ > 0. We fix also the displacement vector to zero, this fact together with the 
symmetries of GS is sufficient to fulfill the fairness condition. The covariance matrix 
7 describes a physical state if, in terms of the four invariants (2 local purities, global 
purity and serelian), the following relations holds Va, Vb > 1, "P > 1 and 1 + ^ > A. 
In standard form these relations transforms, in terms of the parameters as Xa, Afe > 1, 
{XaXb-cl ){XaX b-cl) > 1 and l + (AaAfe--c|)(AaAfe-c^) > Xl + Xl + 2cxCp (see details 
in lemma [2.5.2). The negativity see (2.98), quantifying entanglement between the 



two modes, reads N{p) = ^-^ because /i-|- > 1 > /i_ for all two mode entangled 
GS, where fl% = [A± (A^ - 4/p2)i/2j/2. For two-mode GS, K^ evaluates to 



Q{pj) = (2/7r) arctan [Cx/^/XaXb - c: 



„2 



X 

1 



= (2/^) arctan [( )^ _ i]-s i (5.6) 

V VAVB[a-+a+\ ) 

where the optimal quadratures are the standard unrotated positions (0 = 99 = 0) 



and a± = y [A - (J^a ± VBYI^J^AVBYf - 4/^^. First, we notice that Q = <^ /5 
describes a product state: for GS, Q > is then necessary and sufficient for the 
presence of correlations. Second, we observe that for pure GS, reducible up to local 
unitary operations, to the two- mode squeezed states pr = \4'r){4'r\ characterized by 



Aa = Afo = cosh(2r) and Cx = Cp = sinh(2r), Eq. (5.6) yields a monotonic function of 



the negativity. We compute explicitly Q and expressed in terms of p- for comparison 

QiPr) = (2/7r) arctan(sinh2r) = 

= (2/7r) arctan ('^^;^V (5.7) 



see also Fig. |5.1[ Q is thus, as expected, an operational entanglement measure for 
pure two-mode GS. Third, we find that for mixed states Q majorizes entanglement. 
Given a mixed GS pN with negativity N, it is straightforward to see that Q{pn) 



via (5.6), is always greater than Q{\ipN){i^N\), with IV'at) being a pure two-mode 
squeezed state with the same negativity A^. 

Hence Q quantifies total correlations, and the difference Q{pn) — Qi\'^N){ipN\) 
(where the first term is due to total correlations and the second to quantum ones) 
can be naturally regarded as an operational measure of classical correlations q We 



^The emerging measure of classical correlations is special to Gaussian states, where the correlated 
degrees of freedom are the field quadratures. Different approaches to the quantification of classical 
vs quantum correlations were proposed [66| . 
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Figure 5.1: Bit quadrature correlations vs normalized negativity N for 18000 random two- 
mode Gaussian states. The lowermost dotted (red) curve accommodates pure states. The 
leftmost solid (blue) vertical line denotes separable states parametrized by Cp = 0, Cx = 
e((5^ — l)/(5, with < e < 1 and S — >■ oo. The uppermost dashed (green) horizontal line 
denotes perfectly correlated states with an arbitrary degree of entanglement, parametrized 
by Cx = {S'^ — i-)/S, Cp — ecx (and e, S as before). Product states (totally uncorrelated) lie 
at the origin. 

have evaluated Q on random two- mode GS as a function of their entanglement, 
conveniently scaled to 2N/{\ + 2A'^), as shown in Fig. 5.1 Note that for any en- 



tanglement content there exist maximally correlated GS with Q = 1, and also that 
separable mixed GS can achieve an arbitrary Q from to 1, their correlations being 
only classical. 

5.4 Non- Gaussian states 

Let us now turn our attention towards the even more interesting arena represented 
by NGS. The description of non-Gaussian states requires an infinite set of statis- 
tical moments, so does the entanglement. The best approach to the separability 
problem of arbitrary bipartite CV states was introduced by Shchukin and Vogel 
|71j . They provide necessary and sufficient condition for the negativity of the partial 
transposition i.e. entanglement through an infinite series of inequalities based on 
determinants of successively increasing size matrices containing high order moments 
of the state. Our aim here is to compute Q on such state. Bit quadrature correla- 



tions either in form Eq. (5.4) or Eq. (5.5) can be computed for arbitrary Gaussian 



and non-Gaussian states at the level of Wigner functions. To this aim one needs 
to have a way to express arbitrary density operators corresponding to non-Gaussian 
states into non-Gaussian Wigner functions in a systematical way. Notice that any 
pure non-Gaussian state can be written as 



oo oo / "^ t \71 / ^ t \7Ti 

Y, ^n,m\n,m)= Y, i^n.m 'r^ -|0.0) = Malal)\0,0), (5.8) 



n,m=0 



n,m=0 



Vnim! 



t At^ 



that corresponds to a density operator p^ = /^(a|,a2)/5o/l(ai,a2), where po 



|0,0)(0,0| is the bipartite vacuum state. Then it is easy, by using the map inEq. (5.9), 
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to find the Wigner function, W^ corresponding to p^ in terms of tlie Wigner function 
of a vacuum state, Wo(C) = \ exp(— C"^ • (). 

The action of an operator on a density operator p is always mirrored by the action 
of a corresponding differential operator on the corresponding phase-space probability 
distribution function. We summarize here that result 



1 d 

pa^^{a--—)Wpia,a*) (5.9) 

1 d 

a^p^^ (a* --—)Wpia,a*) 

1 d 

pa) ^^ {a* + - — )Wp{a,a*), 



similar results holds in the position-momentum base, 



\h d 
'2&p' 
\hd_ 
'2 dp' 
\h d 



xp < — > {x + i7^)Vyp(x,_p) 



px i — > (x - —^yVp{x,p) (5.10) 



pp < — > {p - ^^)^p(^'P) 
pp< — y {p+ ^^)^p(^'P)- 

We focus on the most relevant NGS recently discussed in the literature and lastly 
experimentally realized. Remarkably, we find for all of them a monotonic functional 
dependence between the entanglement (negativity) and the quadrature correlations 



Q measure of (5.4). This fact indicates that in the preparation of those states, 
classical correlations are never induced. From a more practical perspective, this 
observation makes their entanglement amenable to a direct measurement in terms 
of quadrature correlations. 

5.4.1 Photonic Bell states 

We consider Bell-like states of the form 1$=*=) = ^|00) ± ^/l - p\ll) and 1^=*=) = 
y^|01) ± y/1 — p\10) (with < p < 1), which are non-trivial examples of super- 
positions of Fock states, entangled with respect to the (discrete) photon number. 
Notice in particular how ^^ for p = 1/2 can be obtained by photon addition to the 
vacuum: l^'L;^ /2) = "Toi^A + ^b)|00)- '^^^ negativity of these Bell- like states reads 
Nb = a/p(1 — p)- For the four of them (and at optimal angles 9 = ip = 0), (5.4) 
reads 

Qb = {^/7t)Nb, (5.11) 
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showing a perfect agreement between the quadrature CV correlations and the en- 
tanglement. 



5.4.2 Photon subtracted states 

Most attention is being drawn by those CV states obtained from Gaussian states via 
subtracting photons [72l |73l [73j : they perform better as resources for protocols like 
teleportation [75l [76] and allow for loophole- free tests of non-locality [671 EHl EHJ [70] . 
Let us recall their preparation, following |75]. The beam A (B) of a two- mode 
squeezed state \(j)r) (created using an squeezed/antisqueezed state and a balanced 
beam splitter) is let to interfere, via a beam splitter of transmitivity T, with a vacuum 



mode, see Fig. 5.2 The output is a four-mode Gaussian state of modes CA'DB' . 



Detection of one photon in each of the two beams C and D, conditionally projects 



the state of modes A'B' into a pure NGS, given in the Fock basis by IV'; 

E^=oCn|n,n), where Cn{T,A) - '- ' 1^^^A^n^1 ^2a2a3/2 

tanhr. 



{T,r). 
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Figure 5.2: Measurement-induced non-Gaussian operation on the two-mode squeezed vac- 
uum state. First, a squeezed and antisqueezed states are let to interfere in a balanced beam 
splitter, BS{bQ : 50) to produce a two-mode squeezed state |0r)- Second, they are both 
mixed with the vacuum in a beam splitter with transmitivity T denoted as BS{T). Finally, 
modes C and D are measured with a photodetector, PS. 



The limiting case T — t- 1, occurring with asymptotically vanishing probability, 
corresponds to an ideal two- photon subtraction, \ipp/ ) oc (aAa_B)|<? 



the negativity is computable as N{il;ps'^ ) = 2/(1 ■ 
increases with r and with T but only in the case T 



). For any T, 
TA) - 1/(1 + T^A^) - 1. It 
: 1 it exceeds V((/)j,) for any r, 
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diverging for r — t- oo. For all T < 1, the entanglement of \ipps'^ ) eventually saturates, 
and above a squeezing threshold r-p ^ 1, the original GS is more entangled than the 
resulting non-Gaussian one. Following [671 EHl EHJ [7^ , the explicit expression of the 



quadrature bit correlations (5.4) can be analytically obtained 



QCV^f''-)^ 



^ps 
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n>m=0 



im+n+S 



7r[T{m, n) — F{n, m)]' 
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nj^m'.n 
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where the c^'s are defined above, F{m,n) = [F 



' 2 / 



-f)] 



and F is the 



gamma function. Again optimal quadrature measurements are achieved a.t 6 = (p 



ps ) 



0. As depicted in Fig. 5.3, the behavior of the entanglement is fully reproduced by 



which again is a monotonic function of A^ i.e. (5.4) is thus measuring truly 



quantum correlations of this important class of NGS as well. 
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Figure 5.3: (a) Bit quadrature correlations Q vs squeezing r and beam splitter transmitivity 
T for photon-subtracted states (shaded surface) and for two-mode squeezed states (wireframe 
surface), (b) Q vs normalized negativity for photon-subtracted states. 



5.4.3 Experimental de-gaussified states 

Up to now we considered nearly-ideal non- Gaussian situations. We apply now our 
definition to the coherent photon-subtracted state pexp recently studied and demon- 
strated by Ourjoumtsev et al [72]. Following their paper for details on the state 
preparation, we recall that each of the two beams of the two-mode squeezed state 
\(f)r) was let to interfere with the vacuum at a beam splitter with reflectivity i? <C 1, 
and by using an avalanche photodiode a single photon was subtracted from the state 
in a de-localized fashion. The realistic description of the obtained highly mixed state 
involves many parameters. We fix all to the values obtained from the theoretical cal- 
culations and/or experimental data of [72], but for the reflectivity R and the initial 



squeezing r which are kept free. We then evaluate ( 5.4 ) as a function of r for different 



values of R. Unlike the previous cases, optimal correlations in the state pexp occur 
between momentum operators {6 = ip = 7r/2). 

Also for this realistic mixed case, the correlation measure Q reproduces precisely 
the behavior of the negativity, as obtained in [72] after full Wigner tomography 
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of the produced state pexp- In particular, the negativity (and Q) increases with 
the squeezing r, and decreases with R. Below a threshold squeezing which ranges 
around ~ 3 dB, the NGS exhibits more entanglement (larger Q) than the original 
two-mode squeezed state. Our results depicted in Fig. |5.4| compare extremely well 
to the experimental results (Fig. 6 of |72] ) where the negativity is plotted there as 
a function of r for different -R's. Thus, the results give an indication of the intimate 
relation between Q and the negativity of non-Gaussian states beyond idealizations. 




Figure 5.4: Bit quadrature correlations Q vs squeezing r (in decibels) for the de-gaussified 
states demonstrated in |72j with beam splitter reflectivity R equal to (from top to bottom); 
3% (red), 5% (blue), 10% (magenta), 20% (green). The dashed black curve depicts Q for a 
two-mode squeezed state. See Fig. 6 of [7^ . 



5.4.4 Mixtures of Gaussian states 

Recent papers [TTJ 178j dealt with mixed NGS of the form pm = p\4>r){4>r\ + (1 — 
p) 1 00) (00 1, with < p < 1. They have a positive Wigner function yet they are NGS 
(but for the trivial instances p = 0, 1). Clearly, the de-gaussification here reduces 
entanglement and correlations in general, as it involves a mixing with the totally 
uncorrelated vacuum state. The negativity of such states reads Nm = N{pm) = 
pN{(j)r) = p(e^^ — l)/2 and is increasing both with r and with p. The same depen- 
dency holds for the bit correlations. 



Qm = QiPm) = (2p/7r) arctan ( iV, 



1 1 

2Nm+P P, 



(5.12) 



which again is a monotonic function of Nm for any p. 

A similar result holds for mixtures of photon-subtracted states with the vac- 
uum. We further studied other NGS including photon-added and squeezed Bell-like 
states j76], and their mixtures with the vacuum, for all we found a direct match 
between entanglement and Q. Interestingly, this is not true for all CV states. 
By definition, Q quantifies correlations encoded in the second canonical moments 
only. We have realized that there exist also states e.g. the photonic qutrit state 
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1^;,) = |00)/\/2 + (|02) + |20))/2] which, though being totally uncorrelated up to the 
second moments {Q = 0), are strongly entangled, with correlations embedded only 
in higher moments. The characterization of such states is an intriguing topic for fur- 
ther study. Finally, we have checked that for all states analyzed, the bit correlations 
obtained in the conjugate quadrature of the optimal one, i.e. Q{6 + tt/2, (/? + 7r/2) are 
either zero or negligible but a possible "heterodyne" generalization of our approach, 
involving measurements of two conjugate quadratures per mode, also deserves further 
attention. 

5.5 Conclusions 

In this chapter, by analyzing the maximal number of correlated bits (Q) that can be 
extracted from a CV state via quadrature measurements, we have provided an oper- 
ational quantification of the entanglement content of several relevant NGS (including 
the useful photon-subtracted states). Crucially, one can experimentally measure Q 
by direct homodyne detections (of the quadratures displaying optimal correlations 
only), in contrast to the much more demanding full tomographical state reconstruc- 
tion. One can then easily invert the (analytic or numeric) monotonic relation be- 
tween Q and the negativity to achieve a direct entanglement quantification from 
the measured data. Our analysis demonstrates the rather surprising feature that 
entanglement in the considered NGS can thus be detected and experimentally quan- 
tified with the same complexity as if dealing with GS. In this respect, it is even 
more striking that the measure considered in this paper, based on (and accessible 
in terms of) second moments and homodyne detections only, provides such an ex- 
act quantification of entanglement in a broad class of pure and mixed NGS, whose 
quantum correlations are encoded nontrivially in higher moments too, and currently 
represent the preferred resources in CV Quantum Information. We focused on opti- 
cal realizations of CV systems, but our framework equally applies to collective spin 
components of atomic ensembles [79], and radial modes of trapped ions [14] . Finally, 
it is also surprising that for all these family of states we have studied, the optimiza- 
tion of just one quadrature scales monotonically with the negativity of the state. 
Although this could expected for pure Gaussian states, our study demonstrated that 
the non-Gaussian states obtained either as de-gaussifications of pure Gaussian states 
or mixings with uncorrelated states preserve this property. 
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Chapter 6 

Measurement induced 
entanglement in Continuous 
Variable 

6.1 Introduction 

In the previous chapters we have presented several implementations of Continuous 
Variable (CV) systems which demand in advance, as a resource, shared entanglement 
between the parties involved. In particular, for the Byzantine agreement protocol we 
demanded a pure, fully inseparable tripartite Gaussian state and completely sym- 
metric under the interchange of the modes with a specific degree of entanglement 
for an efficient realistic implementation of the protocol. In this chapter our aim is 
to provide a realistic optical scheme for the creation and manipulation of multipar- 
tite Gaussian entanglement of arbitrary modes between atomic gas samples. We 
concentrate on a matter-light interaction between Gaussian polarized light and po- 
larized atomic samples. For convenience we analyze quantum non-demolition (QND) 
matter-light interfaces. 

Matter-light quantum interfaces refer to those interactions that lead to a faithful 
transfer of correlations between atoms and photons. The interface, if appropriately 
tailored, generates an entangled state of matter and light which can be further ma- 
nipulated (for a review see |13|. I8UJ and references therein). To this aim, a strong 
coupling between atoms and photons is a must. A pioneering method to enhance 
the coupling is cavity QED, where atoms and photons are made to interact strongly 
due to the confinement imposed by the boundaries [81]. An alternative approach 
to reach the strong coupling regime in free space is to use optically thick atomic 
samples. 

Atomic samples with internal degrees of freedom (collective spin) can be made 
to interact with light via the Faraday effect, which refers to the polarization rota- 
tion that is experienced by a linearly polarized light propagating inside a magnetic 
medium. At the quantum level, the Faraday effect leads to an exchange of fluctua- 
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tions between matter and light. As demonstrated by Kuzmich and co-workers [82], 
if an atomic sample interacts with a squeezed light whose polarization is measured 
afterwards, the collective atomic state is projected into a spin squeezed state (SSS). 
Furthermore, to produce a long lived SSS, Kuzmich and co-workers [83] proposed 
a QND measurement, based on off-resonant light propagating through an atomic 
polarized sample in its ground state. 

A step forward within this scheme is measurement induced entanglement be- 
tween two macroscopic atomic ensembles. As proposed by Duan et al [HJj and 
demonstrated by Polzik and co-workers [79], the interaction between a single laser 
pulse, propagating through two spatially separated atomic ensembles combined with 
a final projective measurement on the light, leads to an EPR state of the two atomic 
ensembles. Due to the QND character of the measurement, the verification of en- 
tanglement is done by a homodyne measurement of a second laser pulse that has 
passed through the samples. From such measurements, atomic spin variances in- 
equalities can be checked, asserting whether the samples are entangled or not. A 
complementary scheme for measurement induced entanglement is also introduced in 



The quantum Faraday effect can also be used as a powerful spectroscopic method 
Tailoring the spatial shape of the light beam, provides furthermore, a detec- 
tion method with spatial resolution which opens the possibility to detect phases 
of strongly correlated systems generated with ultra-cold gases in optical lattices 
[881 [891 [90]. 

Here, we analyze the suitability of the Faraday interface in the multipartite sce- 
nario. In contrast to the bipartite case, where only one type of entanglement exists, 
the multipartite case offers a richer situation |9HI55|. Due to this fact, the verifica- 
tion of entanglement using spin variance inequalities j92] becomes an intricate task. 
We address such problem and provide a scheme for the generation and verification of 
multipartite entanglement between atomic ensembles. Despite the irreversible char- 
acter of the entanglement induced by measurement, we find that a second pulse can 
reverse the action of the first one deleting all the entanglement between the atomic 
samples. This result has implications in the use of atomic ensembles as quantum 
memories [93]. Finally, we introduce the CV formalism for further analysis. That 
is, if one prepares both atoms and light as Gaussian states, then due to the lin- 
earity of the equations of evolution for atoms and light, the evolution is Gaussian 
and it is possible to write the states as covariance matrices and the evolution as a 
symplectic transformation. The explicit use of the covariance matrix enables for an 
entanglement verification through covariance matrix criteria. 



6.2 Quantum interface description 

The basic concept, underlying the QND atom-light interface we will use (see ap- 



pendix 6.A), is the dipole interaction between an off-resonant linearly polarized light 



with a polarized atomic ensemble, followed by a quantum homodyne measurement 
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of light. In section 6.3.1 we review the basic known results that permits, to entangle 
two separated atomic samples by letting light interact with two atomic samples in a 



fixed direction. In section 6.3.2 we detail our new proposal in which light and atoms 
are free to interact at arbitrary angles. 

On one hand, we consider an ensemble of Nat non-interacting alkali atoms with 
individual total angular momentum F = I+J prepared in the ground state manifold 
\F, mp)- Further we assume that all atoms are polarized along the x-direction, which 
corresponds to preparing them in a certain hyperfine state \F^mF) {e.g. in the case 
of Cesium the hyperfine ground state QS1/2 ^-C- L = and J = S = 1/2 is split 
into two hyperfine states with total angular momentum F = 3 and F = 4 due to a 
nuclear spin / = 7/2). We restrict ourselves to one hyperfine level, -F = 4, which is 
possible experimentally because the hyperfine splitting is large compared to typical 
resolutions of the lasers. Furthermore, it is possible to put (almost) all atoms in the 
outermost state with mp = 4, being x the axis of quantization. We describe such 

sample with its collective angular momentum J = (J^, Jy, Jz) being Jk = X]n=i ^k,n 
the total angular momentum of the ensemble {k = x, y, z). Then, the Jx component 
of the collective spin can be regarded as a classical number J^ ~< Jx >= Natf^F, 
while the orthogonal spin components encode all the quantum character. Due to the 
above approximation, the orthogonal collective angular momentum components can 



Jy / \ 'Jxt 'J zl w ■Jx 



m. 



be treated as canonical conjugate variables, 

On the other hand, the polarization of light propagating along the z-direction 
can be described by the Stokes vector s = {sx,Sy,Sz), whose components correspond 
to the differences between the number of photons (per time unit) with x and y linear 
polarizations, ib7r/4 linear polarizations and the two circular polarizations 



-{fix - fly) = -{alcix - alay), 
-{fiy^ - n\,) = -{alay + alax), 



(no - no) 



2 

h 

2i 



yd^dy Qjydx)- 



lyC 



(6.1) 



The above operators have dimension of energy. They are convenient for a mi- 
croscopic description of interaction between light and atoms, however, we will con- 
centrate on the macroscopic variables, defined as Sk{z) = /q Sk{z,t)dt {k = x,y,z), 
where T is the length of the light pulse. Such defined operators correspond now to dif- 
ferences in total number of photons, and obey standard angular momentum commu- 
tation rules. For light linearly polarized along the x-direction Sx ~< Sx >= Nphh/2. 
In such case, the orthogonal Stokes components Sy,Sz are conjugated variables ful- 

ih. 



filling canonical commutation relations 

For a light beam propagating throug 
certain angle a with respect to direction z (see Fig. 6.1), the atom-light interaction 
can be approximated to the following QND effective interaction Hamiltonian (see 



Jy/V^X} ^z/ V^x 

J the atomic sample in the YZ plane at a 
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appendix 6. A for a detailed derivation) 



^SI(«) 



T 



Sz{Jz COS a + Jy sin q) . 



(6.2) 



The parameter o is the coupling constant with dimensions of the inverse of an action. 
The interaction is a linear coupling between the Stokes operator and the collective 
atomic spin operator, thus, the interaction is a Gaussian interaction between two 
bosonic modes. Also, the states for atoms and light, by the strong polarization 
constrain, can be treated as two mode enabling us to tackle the atom-light interaction 
with a CV formalism. 



y 



^ 




Figure 6.1: A beam passing through an atomic sample at an angle a with respect to z. 
The equations of motion [^ for the macroscopic variables for light and atoms are 



TOUt 



j: 



out 



J^ — aS™Jx cos a, 
J^^ + aS™Jx sin a, 



(6.3) 
(6.4) 



QOUt 

Oy 

QOUt 



Qin 
Qin 



aSx{J^^ cos a + J^ sin a) , 



(6.5) 
(6.6) 



=,in/out 



where the operators S, as the Stokes operators characterizing the pulse entering 



{z = 0) and leaving {z = L) the atomic sample. Analogously, J^ 
initial (t = 0) and final state (t = T) of the atomic spin. 



in/out 



correspond to 



From Eq. (6.5) it is clear that the polarization of the outgoing light carries infor- 



mation about the collective atomic angular momentum. The quantum character of 
the interface is reflected at the level of fluctuations, i.e., 



A^: 



out 



A^^) ^ + a^Sl [/\[jf cos a + J'^ sin a]' ^ 



(6.7) 



At the same time, Eqs. (6.3) and (6.4) show the QND character of the Hamiltonian, 
i. e., the measured combination J™ cos a + J" sin a is not affected by the interaction 



^In the particular configuration of Fig. 6.1 both the Hamiltonian and the equations of motion 



can be deduced after an anti x-rotation of angle a to the corresponding expressions of appendix 6. A 
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since it commutes with the effective Hamiltonian. This fact allows to measure the 
fluctuations of the atomic spin components with the minimal disruption permitted 
by Quantum Mechanics. 

In the following sections we will generalize the above formalism to the interaction 
of a light pulse with an arbitrary number, Ng, of spatially separated atomic samples. 
Variables characterizing each sample will be denoted by J^ , where i = 1,2, ... ,Ns 
denotes the samples and k = x,y,z. 

6.3 Bipartite entanglement: Generation and verifica- 
tion 

6.3.1 Magnetic field addressing scheme 

We begin by reviewing the seminal work of Polzik et al |79j leading to the entangle- 



ment of two spatially separated atomic samples, as schematically shown in Fig. 6.2 









^ z ^ z 

a) y b) V 

Figure 6.2: Sketch of the experimental setup applied in [TS] to generate bipartite entangle- 
ment, a) Entangling pulse, b) Verifying pulse followed by homodyne measurement. A local 
magnetic field is added (parallel to the spin polarization direction) in order to measure two 
transverse components of the spin with a single light beam. 

In the experimental setup, both light and atomic samples were strongly polar- 
ized along the x-direction while light propagated along the z-direction (a = 0). It is 
straightforward to generalize the equations of motion of appendix |6.A| for two sam- 
ples. For example, the collective polarization of atoms along the z-direction is still 
preserved, i.e., d.Jz /dt = with z = 1,2, and Eq. (6.5) reads nowrl 



S7* = 5^ - aS., (jP + ji^A . (6. 



.y ^y 

Entanglement between the atomic samples is established as soon as the 8°^^ com- 
ponent of light is measured. Moreover, it should be emphasized that entanglement 
is generated independently of the outcome of the measurement. The real challenge, 
though, is its experimental verification, since spin entanglement criterium relies on 
spin variances inequalities of operators of the type {Jy — Jy ) and {Jz + Jz )■ 
This is so because the maximally entangled EPR state is a co-eigenstate of such 



operators. This fact, in turn, imposes an upper bound (see theorem 2.6.5) on the 



^We will omit the superscripts in/out when it is not necessary. 



96 Measurement induced entanglement in Continuous Variable 



variances of such operators giving rise to a sufficient and necessary condition for 
separability [22] 



A 
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|A|J(^) + ^ 
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A" + ^ ) hJ^, 



(6.9) 



for all A e M. 

The way to experimentally check ^79j the above equation with A = — 1 was to 
add on each sample an external magnetic field, parallel to the spin polarization 
direction, x (see also ^^). The magnetic field was local, therefore, it did not affect 
the generation of entanglement. However, it caused a Larmor precession of the 
collective atomic momenta, which permitted a simultaneous measurement of the 



appropriately redefined "canonical variables" Jy + Jy and J; 
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7(2) 
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+ jf\ Notice 



that this can only be done if the atomic samples are polarized oppositely along the 
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?{2) 7(1) 
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•Jx 



+ £^ 
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x-direction, so that the commutator [Jz + Jz iJy + Jy 

Therefore, the first light beam was used for creation of EPR-type entanglement, and 



another one for its verification through Eq. (6.9). 



Let us detail how the local magnetic field, if measuring the appropriated observ- 



ables, enables for checking Eq. (6.9). As in the appendix 6. A, we derive here the 



complete equation system for observables of light and both samples. As we will see 
the linearity of the system enables us to, in a easy way, to jump to the CV formalism 
via symplectic matrices. 

If a constant and homogeneous magnetic field is added in the x-direction (par- 
allel to the spin polarization direction) the transverse spin components precess at a 
Larmor frequency $7. The magnetic field adds a term [j ff = —fi ■ B = +Q.Jx into 
the Hamiltonian with same field strength and global sign for each one of the two 
samples. The action of the magnetic field at a fixed time produces a rotation of the 
spin vector (active view) that can be mimic as a rotation on the system (passive 
view) via the substitution q — )■ — J7t on the equations of motion considered in the 



appendix 6. A 
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Sz{z,t) = .Sz{t), 



Q^Sy[Z, 



(6.10) 
(6.11) 
(6.12) 
(6.13) 

(6.14) 
(6.15) 



^Remember that B = Q — i and ll = — — J. 
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Grouping the equations (6.10|)-(6.13) and using the fact that the two s 


amples are 


opposite polarized, Jx = —Jx = Jx > 


equations for atoms are 




d 
dt 


j«(z,t)+if(z,t)" 
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-as,(t)(j«+jf))cosf^t = 0, 
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(6.17) 
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dt 
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(6.18) 
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dt 


F(z,t)-if)(z,0 
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-as,{t) (ji^^ - jP) sinQt = 
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—asz{t)2jxsin^t. 


(6.19) 



We next integrate in space (/q pAdz) and time (/q dt) to introduce the macroscop- 
ical variables 
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Eq. ( 6.15| ) is also integrated in space (Jq pAdz) and Eq. (6.14) in space and in time 



(Jq dt cos fit), (Jq dtsinVLt). Using the fact that the observables jy {z) + jy \z) 
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do not evolve, equations for light are 
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(6.25) 



sT'\t) = sT^\t) = sr^\t) = sT\t) 



(6.26) 



We introduce here a suitable choice of pairs of macroscopical observables for light 
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and atoms, where the subscript "L" stands for hght while "A" for atoms 
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to finally £j obtain the solution of the evolution equations for the set of canonical 
variables before and after interaction (denoted by in/out, respectively) 



P'lOut rjin 
Al — -'Al ' 
pout pin 

Qm = Qai - '^-^Ll ) 
Qa2 — Qa2 ~ '^Pl2i 



(6.27) 
(6.28) 
(6.29) 
(6.30) 
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where k = a^/SxJx (adimensional) and Qai-, Pa 



Separability condition (6.9) for A 

2 



(A[j«-Jf]) +(A[J« + Jf) 



translates to 



( 



APAl)'+fAPA2')'>l 



Q Li, Phi 



> 2hJr 



(6.31) 
(6.32) 
(6.33) 
(6.34) 

i, for i = 1,2. 



(6.35) 



(6.36) 



taking into account that the sign of the spin y-component flips the sign (sample 1 
and 2 are symmetric under a vr rotation around z). Thus, checking the inequality can 
be realized within this scheme by measuring the light quadratures operators Q^2 
as seen in Eqs. (6.31) and (6.32). 



Now, we shall illustrate the power of using a CV phase-space formalism to retrieve 
the complete covariance matrix of the final states and to detect and quantify the 
entanglement generation. The variables describing the system after interaction are 



^Taking into account that ^ /. dt sin^ Q,t — ^ J^ dt cos^ fit ~ | and ^ J^ dt sin Qt cos fJi ~ if 
nr ~ 27r. 



6.3. Bipartite entanglement: Generation and verification 99 



expressed as a linear combination of the initial ones. Let us denote by O the following 
linear transformation O : {Q'Xi^ Pjg, Q^^-, P'j^} ^ {Q^f , P%f, Q^f , P£f }, which can 



be straightforwardly obtained from Eqs. ( 6.27 )-( 6.34). Due to the linear coupling be- 



tween light and matter under consideration, the evolution equations can be directly 
translated in phase-space as C°"* = O • C'^ where C = {Qai, Pai, Qa2, Pa2, Qli,Pli, 
Ql2, Pl2)'^ is a phase-space vector. There is a symplectic transformation S'int, corre- 
sponding to the unitary evolution O, relating the state of atoms and light 7, before 
(in) and after (out) the interaction fulfilling 7out = 5';"^^7in S'int and can be recon- 
structed in the following way 

^out,T . ^-^1 . ^out ^ 0^0^ • 7rn' • or = 

= r'^-(o-Sn(o^)-^)-^-r = 

= C'^-Tout-r- (6.37) 

Therefore the symplectic transformation acting on an initial state with covariance 
matrix for light and atoms 7in due to the Hamiltonian (6.66) is therefore Sint = 



{0'^)~^ and can be written in a matricial form. If, as we will consider, one prepares 
the ensemble of atoms in a Gaussian state and Gaussian light is used, the CV formal- 
ism enables us not only to measure fluctuations of specific collective spin variables of 
atoms but the complete covariance matrix and displacement vector after interaction 
enabling for verification of entanglement amenable with covariance matrix criteria. 



We derive explicitly the states and the evolution using this formalism in section 6.3.2 
presenting a new geometric scheme. 

6.3.2 Geometrical scheme 

Our aim has been to apply the QND atom-light interface to study genuine multipar- 
tite entanglement generation with less restrictive conditions, i.e., we assume that: 
(i) individual magnetic field addressing of each atomic ensemble is not allowed and, 
(ii) the number of atomic ensembles can be made arbitrary. Such experimental se- 
tups that can be build, for instance, using optical micro-traps [951 ES] which allow 
for isotropic confinement of 10'^ cold atoms, creating in this way mesoscopic atomic 
ensembles [^ In these setups, the preparation of each sample in a different initial 
magnetic state or the addressing of a sample with individual magnetic fields is out of 
reach. Despite these limitations, an array of micro-traps offers considerable advan- 
tages, ranging from its experimental feasibility to the possibility to generate chains 
and arrays of atomic samples. 

Assuming (i), the verification of entanglement cannot be done anymore by means 
of local magnetic fields on each sample, thus we assume the two samples to be par- 
allel polarized. The way to overcome this problem is depicted in Fig. |6.3| i.e. we 
mimic the action of local magnetic fields in each sample with light propagating at 
different angles. As seen in the previous section they are mathematically equivalent 

^In these experiments with ultra-cold atoms one can reduce the number of atoms up to 10^ still 
having the same opacity of the medium. 
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Figure 6.3: The simplest setup for generation and verification of bipartite entanglement 
between mesoscopic atomic ensembles, a) First light pulse passing through the samples 
along direction z entangles the samples, b) Second light pulse passing through the samples 
at angles 7r/4 and — 7r/4, respectively, allows for verification of entanglement through a 



variance inequality (see Eq. (6.9)) 



local operations. To better understand the dynamics of the interaction in this config- 



uration, we analyze in some detail the setup of Fig. 6.3 In the first shot, light passes 
through the two sample. As indicated in Eq. (6.8), the light carries information 



about Jz + Jz and the measurement of 5"°"* generates entanglement between the 



atomic samples. Starting from the evolution equations (6. 3), (6. 4) and taking into 



account the light measurements, one can explicitly derive the variances of the atomic 
spin samples and interpret them in terms of global or non-local squeezings. In the 
picture, polarized ensembles of atoms in the ground state will be characterized as a 
vacuum state while light beams will be described as coherent states. In this view, 
the final bipartite state of the ensembles is characterized by the following variances 






A[J« + jf)] 



(A[Ji^) - J^' 



(1 + 2K^)hJ^ 
hJx, 

tlJxi 



1 



1 + 2k2 



(6.38) 
(6.39) 
(6.40) 
(6.41) 



where k = ay/SxJx is the adimendional coupling interaction. The observables for 



J, 



(1) 



J,, with A 



which the separability criterion (Eq. (6.9)) is violated correspond to Jz + Jz and 



(1) , 7(2) 



-1. Such a measurement induces squeezing on the variances 



along the z-direction below the separability limit, as clearly indicated by Eqs. (6.39) 



and (6.40) 



The second part, the verification, it involves a measurement of the sum of the 



variances corresponding to Eqs. (6.39) and (6.40). In order to do this with a sin- 



gle beam we use light propagating at different angles, as schematically depicted in 



Fig. |6.3[b). In this case, according to Eq. (6.5) we obtain 



s: 



out 



SI 



K bx 

V2\Tx 



[j^ + jf )) + (j(i) - jf 



(6.42) 
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(i) 



tU) 



Since within this scheme < Jy Jl >=< Jy >< Jz >, the variance of the output 
can be written as 



+ 



A5°"* 



Z Jx 



A5- 



A[J« + jf)])V(A[J«-jf])'). (6.43) 



For details concerning the experimental measurement of such variances see [971 [98]. 
This shows that entanglement between two identically polarized atomic ensembles 
can be generated, irrespectively of the value of the coupling constant k, and verified 
using only two beams and no additional magnetic fields, if the second field impinges 
on the two samples at certain angles. 

To increase entanglement between the two samples one should introduce global 
squeezing in two independent variables. This is schematically depicted in Fig. |6.4[a) 



and |6.4[ b). The first beam introduces squeezing in j^ + J^ variable. Then, a 
second beam propagating through the first sample at an angle a = tt/2 and through 
the second one at an angle a = — 7r/2 generates squeezing in Jy — Jy . 
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Figure 6.4: The setup for generation and verification of bipartite entanglement between 
atomic ensembles in which squeezing is introduced in two variables a) Ji 



r(2) 



-J?^andb)4^^- 



Jy increasing entanglement. The third pulse depicted in figure c) allows for verification of 
entanglement through a variance inequality. It should be emphasized that the first and last 
step are exactly the same as in Fig. |6.3| 



Note that these are commuting operators, so the second beam would not change 
the effect of the first one (squeezing of Ji + Ji ) . The verification of entanglement 
(see Fig. |6.4| ||c)) can be done as previously described. Within this scheme one re- 
produces the results of Julsgaard et al ^79] without individual addressing i.e. EPR 
entanglement between two atomic samples. 
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6.3.3 Continuous Variable analysis 



We detail here explicitly the setup of Fig. |6 .31 at the level of covariance matrix (CM) 
formalism. The initial state of the two samples and the light is given by the CM 



for atoms and light 7j 



A,L 



if ® I2 • The symplectic matrix, S'int, describing the 



interaction of light passing through the samples at zero angle is 
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(6.44) 



thus, the state after the interaction takes the form 
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(6.45) 



Both modes, representing the samples, are entangled with light, however their re- 
duced state is separable as one can check applying NPPT criterium in the CM of 
the lower-right block matrix. Entanglement between atomic samples is not produced 
until one measures one quadrature on the light. For this aim, one uses the action of 



an homodyne measurement on the light mode (see section 2.5.6). The measurement 



of light leads to the CM describing the final state of the samples. 
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(6.46) 



(6.47) 



being ^ = 4 ln(l -|- 2^^) a local squeezing. In this way we write the final state of the 
two atomic samples in standard forin. 

The resulting bipartite state of the two samples is pure and parametrized by k 
only, thus it can be written as a two mode squeezed state 
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/cosh 2r sinh 2r 

cosh 2r 

sinh 2r cosh 2r 

\ -smh2r 

with squeezing parameter r = 2arccosh(^==^ 
pure EPR entanglement with negativity 

-E'Af(7TM5) = cosh rlog2Cosh r — sinh rlog2sinh r. 



\ 

— sinh 2r 


cosh2r y 

r) (see lemma 



(6.48) 



2.5.2|) i.e. containing 
(6.49) 



6.4 Entanglement eraser 

Interesting enough, our geometrical approach also opens the possibility of deleting 
all the entanglement created by the first light beam, if intensities are appropriately 
adjusted. The entanglement procedure is intrinsically irreversible because of the 
projective measurement, so coming "deterministically" back to the initial state is 
not a trivial task. In |99l llOOj . a quantum erasing scheme in Continuous Variable 
systems was proposed. The measurement of the meter coordinate entangled with the 
quantum system leads to a back-action on it. The authors shown that it is possible 
to erase the action of the measurement and restore the original state of the system. 
Here we are interested in deleting the measurement induced entanglement between 
two atomic samples, exploiting the squeezing and antisqueezing effects produced by 
the laser beams. 
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Figure 6.5: Entanglement eraser scheme realized by two pulses of different intensity, n\ ex 
N\^ and k\ cx N\^. See the text for details. 



Let us assume that the first entangling beam, characterized by a coupling con- 
stant k\ cx A'pjj , propagates along the z-direction, exactly as it was described before 
(see Fig. |6.5| ^a)). The interaction, followed by the measurement of light, creates 
squeezing in the observable Jz +Jz accompanied by antisqueezing in the conjugate 



?(i) 



?(2) 



12) 



variable Jy + Jy (Eqs. (6.38) and (6.40)). Assume a second beam characterized 



by a coupling constant ^2 oc NK^ propagates through the samples in an orthogonal 
direction with respect to the first beam as shown in Fig. |6.5[ b). This corresponds to 
setting a = -k 12 in the Hamiltonian of Eq. (6.2). In this setup the measurement of the 



variable 5"°"* introduces antisqueezing in the observable Ji+Ji while squeezing 
in the conjugate variable Jy + Jy . 
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The bipartite state created by propagation and measurement of the first and 
second beam is characterized by the variances 



2Kf + 1 



^i^J"-4''i)'^-(i;^ 



4 + 1 

2 



^Jx, (6.50) 



^[4'^- 4'^] =^J-^ (6-51) 



A[Ji^) + J^])' = (24 + ^;^) f^J., (6.52) 

A[JP-JF)])' = /iJx. (6.53) 



A close look at these equations shows that the second beam can lower or even 
completely destroy entanglement between the samples. This happens when 

4 = ^. (6.M) 

In such case the atomic ensembles are left in a vacuum (uncorrelated) state, however, 
displaced. Hence, the overall effect of these two beams is simply a displacement of 
the initial vacuum state. The value of the displacement depends on the coupling 
constants ki_2 and outputs obtained in the measurement of the light polarization 
component, 5"°^*, of both beams. Therefore, it will vary run to run. 

Using negativity, computed by the symplectic eigenvalues of the partial trans- 



pose of the covariance matrix (2.97), one finds that indeed entanglement diminishes 



continuously or even disappears depending on the value of K2, as shown in Fig. 6^ 
Notice that for every fixed value of ki there always exists a value of K2 for which neg- 
ativity becomes zero and the state becomes separable even though it was entangled 
after the first interaction and measurement on the beam. 

6.5 Multipartite entanglement 

In what follows we generalize our study to the multipartite scenario and we present 
different strategies to achieve multipartite entanglement without individual address- 
ing. The strategies will not depend on the total number of samples but only if 
this number is odd or even. For the verification part, we shall adopt the criterium 
for multipartite entanglement, expressed via generalized inequalities for variances of 
quadratures, derived by van Loock and Furusawa |92]. We rewrite the inequalities 
for angular momentum variables as follows. If an Ng-mode state p is separable, then 
the sum of variances of the following operators 



V = gjp + . . . + g^J(/^) , (6.55) 
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Figure 6.6: The negativity of a bipartite state of atomic ensembles after passage and mea- 



surement of two beams of coupling parameters ki and K2 (see Fig. 6.5 1. For specific values 
of Ki and K2, i.e. fulfilling (6.54), the negativity approaches zero. 



is bounded from above by a function of the coefficients hi, . . . ,hj^^,gi, . . . ,gN^ 
Mathematically the inequality is expressed as 



with 



{Auf + {Aijf > f{hi,...,hN^,gi,...,gNjhJx, 



(6.56) 



f{hi,...,hN,,gi,...,gNs) = \hmgn 



+ '^hr9r\ + \hngn + '^hsgs\. (6.57) 

rei se/' 



In the above formula two modes, m and n, are distinguished and the remaining 



modes are grouped in two disjoint sets / and I'. The criterion (6.56) holds for all 



bipartite splittings of a state defined by the sets of indices {m} U / and {n} U /', and 
for every choice of parameters hi, ... , hj\fs > 5i > • • • > ONs ■ For example, in case of three 
samples we have /(/ii, /12, /^s, 51,92,53) = {\hn9n\ + \hkgk + hjngm\), where {n,m,k) 
is some permutation of the sequence (1, 2, 3), and the coefficients hi, /12, /i3, 51, 52, 93 
are arbitrary real numbers. 



6.5.1 GHZ-like states 

Genuine multipartite entanglement between any number of equally polarized atomic 
modes can be obtained with a single beam propagating through all of them followed 
by a projective measurement of the light. After the measurement, the A'^s-mode 



variable Ji + . , 



+ J; 



(Ns) 



is squeezed. This is a trivial extension of the bipartite 



scheme schematically shown in Fig. |6.3[a 
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The phenomenon of destruction of entanglement by squeezing of the conjugate 
variable, which was discussed in the previous section for two modes, can be also found 
in the multimode setup. The entanglement prepared with the light beam charac- 
terized by the coupling constant ki can be erased by the second orthogonal beam 
with appropriately adjusted intensity. The relation between the coupling constants 
for which entanglement is removed from the system is 

,.2 _ '*! 



One can see that with increasing number of samples the value of K2 required to delete 
entanglement decreases. 

To generate a maximally entangled GHZ state with A'^g-parties, simultaneous 
squeezing in more independent variables is needed. By independent here we mean 
commuting linear combinations of atomic spin operators. The most straightforward 
way to do it is to generate squeezing in the variable Jz + ■ ■ ■ + Jz and in the 
pairwise differences of angular momenta: Jy — Jy (1 < i,j < Ng, i 7^ j) (see 
|49l l6]). An entangled state with such properties can be realized by generalization of 
the bipartite scheme summarized in Figs, p^ a) and |6.4| ^b). Notice, however, that 
the last step b) should be repeated for all combinations of i > j. The final variances 
characterizing the state would be 

A[jp + ... + J(-)])^^^^.J., (6.59) 



^[J?-ji'V =T^W^2^J^ i'^j)- (6-60) 



1 

1 +~NsK^ 

Thus the samples are in a genuine A'^g-mode GHZ state. Within this scheme the num- 

(/V \ /v^ 

2^) +1 ~ -^, one has to perform in order to create genuine 

entanglement, grows quadratically with the number of samples. Also verification 

implies checking all the inequalities of the type 

(a[J« - J(^)])' + (A[jii) + . . . + Jf ^)])' > 2hJ, (i > j). 

While the above procedure works for an arbitrary number of samples, to optimize it 
we consider separately even and odd Ng. 

For even number of ensembles Ng = 2M the optimal approach generalizes the 
one proposed for two samples and summarized in Figs. |6.4[ a) and |6.4[ b). In first 
step we generate squeezing in j] + . . . + j] . As the second step we squeeze 
the observable Jy — Jy + . . . + {—l)'^^~^Jy with the second beam passing 
through the ith sample at an angle (— l)*~^7r/2. The final state is pure and genuine 



multipartite entangled. The entanglement can be detected using the criterion (6.56) 
with the two squeezed observables discussed in this paragraph. The measurement of 
light propagating through the ith sample at an angle (— l)*~^7r/4 gives at the level 
of variances 
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A5°"M'= (^Sl^'Y + 



+^^(a[jW + ... + J(^'')]Y. (6.61) 



2 J- 



X 



Therefore, again a single beam can be used for verification of entanglement. The 
same criterion and the above measurement scheme can be applied not only to detect 
the entanglement in the above setup but also in those proposed before, i.e., (i) the 
state with squeezing only in Jz +... + Jz (after interaction and measurement 
of only the first beam), and (ii) the state with squeezing in Jz +... + Jz and 
all combinations Jy — Jy {i ^ j). The reduction in the number of measurements 
is significant. Moreover, a recently proposed multi-pass technique |101j could lead 
to a simplification of the geometry. 

Optimization of the scheme for odd number of atomic ensembles within this 
geometric approach is to our knowledge not possible. Even though it is possible to 
find independent variables involving all the samples, it is not clear what geometry 
should be applied in order to measure these operators. 

A different way to deal with multimode entanglement of odd number of samples is 
to generalize directly the bipartite scheme of Julsgaard et al, i.e., polarize the samples 
in such a way that the collective polarization ^^ Jx is zero. Moreover, each sample 
should experience a different local magnetic field. In such system it is possible to 
generate squeezing in appropriately redefined (due to Larmor precession) operators 
'^- Jy and ^^ Jz , using a single light beam. This is possible due to the choice of 
the initial polarization of the samples making the redefined operators to commute. 
Analogously to the bipartite case the entanglement test that can be applied involves 
measurement of variances of the sums of angular momentum components and reads 

Uy^J^A +Uj;j«j >NshJx. (6.62) 

6.5.2 Cluster-like states 

In |102j a class of A^-qubit quantum states generated in an arrays of qubits with an 
Ising-type interaction were presented, the so-called cluster states. While for pure 
states of bipartite qubit systems there is a single "unit" of entanglement, the one 
contained in a Bell state, for three or more parties several inequivalent classes exists. 
Cluster states, generated in optical lattices and similar systems, can be regarded 
as an entanglement resource since one can generate a family of other multipartite 
entangled states by simply performing measurement and using classical communica- 
tion. Using the scalability properties of cluster states, Hans Briegel et al presented 
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a scheme for scalable one-way quantum computation [103| 1104] . In there, cluster 
states are the entire resource for quantum computation while computation consists 
of a sequence of one-qubit projective measurements on them driving the computa- 
tion. It is an universal quantum computer since any unitary quantum logic network 
can be simulated on it efficiently. 

We detail here, how the analyzed setup allows for generation of Continuous Vari- 
able cluster-like states |105j . We associate the modes of the A^'^-mode system with 
the vertices of a graph G. The edges between the vertices define the notion of nearest 
neighborhood. By Na we denote the set of nearest neighbors of vertex a. A cluster 
is a connected graph. For angular momentum variables, cluster states are defined 
only asymptotically as those with infinite squeezing in the variables 



(6.63) 



b&Na 

for all a £ G. Cluster-like states are defined when the squeezing is finite. Given 
a set of A''^ atomic ensembles, it is possible to create a chosen cluster-like state by 



squeezing the required combinations of variables (6.63). Since they commute, it is 



possible to squeeze them sequentially. Hereafter, we will illustrate the procedure by a 
simple example. The method is general and can be applied to create any cluster- like 
state. 
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Figure 6.7: Generation of the cluster state schematically depicted in a). The sequence of 



beams squeeze the following variables: b) Jz — Jy , c) Jz — Jy " — Jy ", d) J; 
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In Fig. 6.7 we show how to create the simplest 4-site (linear) cluster state. Let 



us introduce the new variables for each sample 



Jy 






J«' = ^ f J,W + Jl') ] . (6.64) 

The squeezing in the co mbin ations of the new variables is produced by passing light as 



depicted in Figs. 6.7 ^b)- 6.7 ^e) . For example the squeezing in Jz — Jy is generated 



(1)/ 
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when light passes only through samples 1 and 2 at angles ib7r/4 respectively (see 
Fig. |6.7[ b) ) . All the other required combinations are squeezed in a similar way. 

In order to verify that the state is entangled it is enough to check the set of 
variance inequalities given in |106j . This can be done, for example, by repetition of 
each step as first proposed in |79l [97] . 



6.6 Conclusions 

In this chapter, we have studied multipartite mesoscopic entanglement using a quan- 
tum atom-light interface in various physical setups, in particular those in which the 
ensembles cannot be addressed individually. Exploiting a geometric approach in 
which light beams propagate through the atomic samples at different angles makes 
it possible to establish and verify EPR bipartite entanglement and GHZ multipartite 
entanglement with a minimal number of light passages and measurements, so that 
the quantum non-demolition character of the interface is preserved. We have also 
shown how to generate cluster-like states by a similar technique. 

Furthermore, we have shown that the multipartite entanglement created by the 
quantum interface of a single light beam can be appropriately tailored and even 
completely erased by the action of a second pulse with different intensity. This 
control widens the possibilities offered by measurement induced entanglement to 
perform quantum information tasks. 



6. A Appendix: Detailed atom-light interactions 

6.A.1 Interaction Hamiltonian 

We detail here the derivation of the effective Hamiltonian (see [131 EHl ES llU7j ) 
coupling atoms and light in the off-resonant limit, neglecting absorption effects and 
spontaneous emission which is justified if the detuning from the optical transition is 
large enough. Dispersion effects can change the polarization state of the light if the 
sample is birefringent i.e. the index of refraction is different for orthogonal polar- 
ization components. In our scheme, x-polarized light propagates in the z-direction 
through the atomic samples which is polarized along the x-axis. Thus, x is an optical 
axis that leaves unchanged the x and y polarizations of light. In what follows, we 
omit dispersion effects considering that the linear birefringence is zero. We will con- 
centrate more on the continuous description of light and matter since it is convenient 
for describing the time dynamics of the system. 

We consider real cesium atoms with its hyperfine split ground state and excited 
states, and coupling them off-resonantly to the 65i/2 — ^ 6P3/2 dipole transition (see 

Fig. 



6.8). The interaction Hamiltonian, i^int = — X^,- dj ■ E{rj), in the rotating wave 



approximation, eliminating adiabatically the excited states turns in 
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Figure 6.8: Atomic energy levels for the cesium. 
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coupling the spin degrees of freedom of atoms and the Stokes vector of light. The 
parameter a = g^|^ is a coupling constant with A being the cross section, A 
the wave length of hght, A the detuning energy and 7 the frequency width of the 
atomic excited states. As one can see from the above expression, the detuning 
should not be too large for the interaction not to vanish. The first term proportional 
to ao amounts for a Stark shift to all atoms proportional to the photon density 
0(z,t) = 2(^x+%) = 2i^^^x + (Hi0.y). The second term proportional to ai, known as 
the Faraday rotation, rotate around the z-axis the spin vector and the Stokes vector. 
The last terms proportional to 02 are higher orders coupling light and atoms. All 
these terms conserve the total angular momentum of light and atoms. As usual we 
have defined ladder operators for light s±{z, t) = Sx^^isy = — jSiOzp and for angular 
momentum j±{z, t) = jx ± '^jy rl For the particular case of Cesium on F = 4 and 



® Choosing z as the axis of quantization, we know from any elementary book on Quantum Me- 
chanics that 
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large detuning, oq — )• 4, ai — )• 1, 02 — )• 0. Additionally the Stark shift term can be 
suppressed by shifting the energy, thus we restrict ourselves to the linear coupling 
i.e. we can fix the constants to the corresponding values ao = 02 = and ai = 1. 
Performing a time and space integration to write the Hamiltonian in terms of the 
macroscopical variables S^ and J^ = L jkiz,t)pAdz, being p the spin density, then 

Hft = ^l dtHi^tit) = -^ I dtj s,{z,t)j,{z,t)pAdz = -^SM (6.66) 



and we recover (6.2) for a = i.e., when the light propagates along the z-axis while 



the sample is polarized along x. 

6. A. 2 Equations of evolution 

The total Hamiltonian /itot = h^ + hi + /lint contains the Hamiltonian for atoms 
(A), light (L) and the interaction (int). The effective Hamiltonian governs the atomic 
dynamics and the evolution equations are derived straight through the Heisenberg 
equations for matter and Maxwell-Bloch equations (neglecting retardation effects) 
for light. We derive the equations of evolution for light an atoms in the following. 

Heisenberg evolution for light can be recasted to a Maxwell-Block evolution for 
the ladder operators as follows 

9., „ 1 r 6 ,t.. 



1 /-^ 1 



/°° 1 » „ . 

-[a(A:, t),hA + hL + hintW'^'dk 
00 ^'^ 



StT j-oo 

^ [ \( [ dk'hck'[d(k, t),d\k', t)]d{k', t)] e'^^dk + 

27r 7_oo 1^ \J-oo J 

1 f°° 1 - 1 - 
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v2vr J-oo 1"- i"- 

1 1'°^ ■ 1 - (9 

icka{k,t)e^ ^dk = —[d{z,t), hint] — CTrd{z,t), 



27r J-oo i^ dz 



finally (^ + c^)d{z, t) = Yfi[d{z, t), /imt]- As said, we will neglect retardation effects, 
i.e. we do not calculate dynamics on the time scale L/c of propagation across the 
sample (equivalently we set c — >• 00). 

In terms of the Stokes components then the evolution for light reads 

d 1 

—Si{z,t) = —[si{z,t),hint{z,t)], (6.67) 

while for atoms, Heisenberg evolution equations are 

d -. 1 . 

^Ji(^,0 = rr[ji{z,t),hint{z,t)]. (6.68) 
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Evolution for the ortogonal y and z components using Eqs. (6. 67), (6. 68), the 



interacting Haniiltonian (6.65) in the hnear regime, i.e. setting ao = 02 = and 
ai = 1 together with the commutation rules [j gives rise to 



d_ 

dt 
d_ 

Jt 



jy{z,t) = -asz{z,t)j^, 



d Qj -^ 

— Sy{z,t) = Sxjz{z,t)S{t-t'), 



d_ 
dz 



Sz{z,t) = 0. 



(6.69) 
(6.70) 

(6.71) 
(6.72) 



Strong x-polarized atoms and light imposes jx{z,t) = jx and Sx{z,t) = Sx, thus 



Jx{Z, t) — Jxi 

Q^jyiz,t) = -asz{t)jx, 
jz{z,t) =jz{z), 



(6.73) 
(6.74) 
(6.75) 



Sx\Zj t) — Sx, 

Q^Sy{z,t) = Sxjz{z)6(t-t'), 

Sz{z,t) = Sz{t). 



(6.76) 
(6.77) 
(6.78) 



Finally, we integrate in space (/^ pAdz) and time (Jq dt) to recover the equations 
of evolution for the macroscopical variables of atoms and light 



Jx= I jx{z,t)pAdz = jx, 
Jo 

Jy{t = T) - Jy{t = 0) = -aSzJx, 

Jz= [ 3z{z)pAdz = J,(t = 0) = Jz{t = T), 
Jo 

^x — / Sx{Z, t)dt — Sx-i , 

Jo 

Sy{z = L) - Sy{z = 0) = -aSxJz, 

Sz= [ Sz(t)dt = Sz(z = 0) = Sz{z = L). 
Jo 



"For light [S^,Sj] = [J^§,{t)dij!^S,{t')dt'] = ih j[^ j^ dtdt' e,jkSk{t)5{t 
i^f^ijfc /o Sk{t)dt = iheijkSk and atoms [ji{z),jj{z)] = iheijkjk{z)- 



(6.79) 
(6.80) 
(6.81) 

(6.82) 
(6.83) 
(6.84) 

t') = 
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In the following, it will be useful to think in terms of input/output variables, 
i.e. we define the operators 5™/°^ as the Stokes operators characterizing the pulse 

entering {z = 0) and leaving {z = L) the atomic sample. Analogously, J™ 
correspond to initial {t = 0) and final state {t = T) of the atomic spin. In this way 
we can write the evolution as a linear equation system 



(6.85) 
(6.86) 

(6.87) 
(6.88) 
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recovering Eqs. (6.3)-(6.6) for a = i.e., when the light propagates along the z-axis 



while the sample is polarized along x. 
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Chapter 7 



Conclusions 



Summarizing we have studied several quantum protocols with Continuous Variable 
(CV) systems giving special importance to the efficiency such protocols can achieve 
when considering current experimental possibilities. Independently of future tech- 
nological improvements, noise is intrinsically ascribed to any measurement and ma- 
nipulation. We have taken into account that, but also we have considered non-ideal 
Gaussian resources and imperfections on the experimental realization. Regarding 
Gaussian multipartite entanglement, we have used entanglement induced measure- 
ment schemes, for the creation and manipulation of multipartite entanglement while 
proposing a possible candidate physical system for its realization. Finally, motivated 
by the performance enhancement offered by non-Gaussian states for communication 
tasks, we have analyzed and proposed a correlation measure based on quadrature 
correlations. Our measure, provides an excellent quantification of correlations not 
only for Gaussian states but also for non-Gaussian states, where determination of 
entanglement is normally not known. Furthermore, our measure has a low com- 
putable cost compared to other methods which require a full tomographic analysis 
of the state. 

Specifically, we have first shown that the sharing of entangled Gaussian variables 
and the use of only Gaussian operations permits efficient Quantum Key Distribution 
against individual and finite coherent attacks. We have used the fact that all mixed 
NPPT symmetric states can be used to extract secret bits to design an algorithm, 
that efficiently succeeds for a secure extraction of a key. Whereas under individual 
attacks all mixed NPPT symmetric states admit a finite efficiency, for finite coherent 
attacks an additional condition constrains the parameters of the states. We have 
introduced a figure of merit (the efficiency E) to quantify the number of classical 
correlated bits that can be used to distill a key from a sample of M entangled states. 
We have observed that this quantity grows with the entanglement shared between 
Alice and Bob. 

Secondly, we have proposed a protocol to solve detectable broadcast with entan- 
gled Continuous Variable using Gaussian states and Gaussian operations only. Our 
protocol relies on genuine multipartite entanglement distributed among the three 
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parties, which specificahy have to share two copies of a three-mode fully symmetric 
Gaussian state. Interestingly, we have found that nevertheless not all entangled sym- 
metric Gaussian states can be used to achieve a solution to detectable broadcast: a 
minimum threshold exists on the required amount of multipartite entanglement. We 
have moreover analyzed in detail the security of the protocol. In its ideal formula- 
tion, our protocol requires that the parties share pure resource states, and that the 
outcomes of homodyne detections are perfectly coincident and not affected by any 
uncertainty; this however entails that our protocol achieves a solution with vanishing 
probability. To overcome such a practical limitation, we have eventually considered a 
more realistic situation in which firstly the tripartite Gaussian resources are affected 
by thermal noise, and, more importantly, the homodyne detections are realistically 
imperfect, and secondly there is a finite range of allowed values for the measurement 
outcomes obtained by the parties. We have thoroughly investigated the possibility 
to solve detectable broadcast via our protocol under these relaxed conditions. As a 
result, we have demonstrated that there exists a broad region in the space of the rele- 
vant parameters (noise, entanglement, range of the measurement shift, measurement 
uncertainty) in which the protocol admits an efficient solution. This region encom- 
passes amounts of the required resources which appear attainable with the current 
optical technology (with a legitimate trade-off between squeezing and losses). We 
can thus conclude that a feasible, robust implementation of our protocol to solve 
detectable broadcast with entangled Gaussian states may be in reach. 

Motivated by the relation between the entanglement and the distillation of clas- 
sically correlated bits we analyzed which is the maximal number of correlated bits 
(Q) that can be extracted from a CV state via quadrature measurements. We have 
provided an operational quantification of the entanglement content of several rele- 
vant non-Gaussian states (including the useful photon-subtracted states). Crucially, 
one can experimentally measure Q by direct homodyne detections (of the quadra- 
tures displaying optimal correlations only) , in contrast to the much more demanding 
full tomographical state reconstruction. One can then easily invert the (analytic or 
numeric) monotonic relation between Q and the negativity to achieve a direct en- 
tanglement quantification from the measured data. Our analysis demonstrates the 
rather surprising feature that entanglement in the considered non-Gaussian states 
can thus be detected and experimentally quantified with the same complexity as if 
dealing with Gaussian states. In this respect, it is even more striking that the mea- 
sure considered in this paper, based on (and accessible in terms of) second moments 
and homodyne detections only, provides such an exact quantification of entanglement 
in a broad class of pure and mixed non-Gaussian states, whose quantum correlations 
are encoded nontrivially in higher moments too, and currently represent the pre- 
ferred resources in CV Quantum Information. We focused on optical realizations 
of CV systems, but our framework equally applies to collective spin components of 
atomic ensembles, and radial modes of trapped ions. Finally, it is also surprising that 
for all these family of states we have studied, the optimization of just one quadra- 
ture scales monotonically with the negativity of the state. Although this could be 
expected for pure Gaussian states, our study demonstrated that the non-Gaussian 
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states obtained either as de-gaussifications of pure Gaussian states or mixings with 
uncorrelated states preserve this property. 

Finally, we have studied multipartite mesoscopic entanglement using a quan- 
tum atom-light interface in various physical setups, in particular those in which the 
ensembles cannot be addressed individually. Exploiting a geometric approach in 
which light beams propagate through the atomic samples at different angles makes 
it possible to establish and verify EPR bipartite entanglement and GHZ multipartite 
entanglement with a minimal number of light passages and measurements, so that 
the quantum non-demolition character of the interface is preserved. We have also 
shown how to generate cluster-like states by a similar technique. Furthermore, we 
have shown that the multipartite entanglement created by the quantum interface of 
a single light beam can be appropriately tailored and even completely erased by the 
action of a second pulse with different intensity. This control widens the possibili- 
ties offered by measurement induced entanglement to perform quantum information 
tasks. 
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